WPTimeCapsulePOC

Backup y Staging de WP Time Capsule 1.21.16 - Prueba de Concepto de Bypass de Autenticación Recientemente se descubrió un bypass de autenticación https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/ en WP Time Capsule 1.21.16 . Este PoC demuestra cómo funciona el proble...

EUVD-2020-31256

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWPJSONPREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies...

CVE-2020-37255: Authentication Bypass Using an Alternate Path or Channel

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWPJSONPREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies...

CVE-2020-8771

The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWPJSONPREFIX causes the client to be logged in as the first account on the list of administrator accounts...

CVE-2020-8771: Improper Authentication

The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWPJSONPREFIX causes the client to be logged in as the first account on the list of administrator accounts...