43 matches found
CVE-2021-29447-Authenticated-XXE-WordPress-5.6-5.7
CVE-2021-29447 Authenticated XXE Exploit for WordPress 🎯 A Python PoC to exploit the authenticated XXE vulnerability CVE-2021-29447 in WordPress versions 5.6–5.7 via WAV metadata. It abuses the iXML chunk in WAV files to trigger an Out-of-Band OOB exfiltration of sensitive data—like /etc/passwd,...
7.1CVSS6.9AI score0.85719EPSS
SaveExploits20
20