0-click-RCE-Exploit-for-CVE-2024-50498

CVE-2024-50498 / Exploit RCE 0-Click Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1858512517774868845 Este repositório contém uma prova de conceito de exploit para CVE-2024-50498, uma vulnerabilidade de injeção de código não autenticada no plugin LUBUS WP Query Console para WordPres...

CVE-2024-50498

Improper Control of Generation of Code 'Code Injection' vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through = 1.0...

CVE-2024-50498

Summary of CVE-2024-50498: The WordPress plugin WP Query Console ≤ 1.0 is vulnerable to an unauthenticated Remote Code Execution due to improper control of code generation, enabling arbitrary PHP execution via a crafted REST request (example: POST to /wp-json/wqc/v1/query with {"queryArgs":"phpin...