CodePath_Week_7-8

CodePath Semana 7-8 Tarea de CodePath para las Semanas 7 y 8: CVE-2017-14719, CVE-2019-9787 y Modificación no autenticada del contenido de Páginas/Entradas vía REST API Proyecto 7 - Pentesting de WordPress Tiempo dedicado: 16 horas en total Objetivo: Encontrar, analizar, recrear y documentar...

WordPress 3.9.x < 3.9.20 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A flaw in $wpdb-prepare can create unsafe queries leading to potential SQL injection flaws with plugins and themes. - Multiple cross-site scripting XSS vulnerabilities...

WordPress 3.0-4.8.1 - Path Traversal in Unzipping

Description A path traversal vulnerability was discovered in the file unzipping code...

WordPress <=4.8.1 - Path traversal vulnerability (file unzipping code)

Path traversal vulnerability found by Alex Chapman noxrnet in WordPress file unzipping code version 4.8.1 and earlier versions. Solution Update the WordPress to the latest available version at least 4.8.2...