CodePath_Week_7-8

CodePath Week 7-8 CodePath Assignment for Weeks 7 & 8: CVE-2017-14719, CVE-2019-9787 & Unauthenticated Page/Post Content Modification via REST API Project 7 - WordPress Pentesting Time spent: 16 hours spent in total Objective: Find, analyze, recreate, and document vulnerabilities affecting an old...

WordPress 3.9.x < 3.9.20 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A flaw in $wpdb-prepare can create unsafe queries leading to potential SQL injection flaws with plugins and themes. - Multiple cross-site scripting XSS vulnerabilities...

WordPress 3.0-4.8.1 - Path Traversal in Unzipping

Description A path traversal vulnerability was discovered in the file unzipping code...

WordPress <=4.8.1 - Path traversal vulnerability (file unzipping code)

Path traversal vulnerability found by Alex Chapman noxrnet in WordPress file unzipping code version 4.8.1 and earlier versions. Solution Update the WordPress to the latest available version at least 4.8.2...