106 matches found
WordPress Plugin MailPoet Newsletters 2.6.8 - 'wysija-newsletters' Arbitrary File Upload (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress MailPoet wysija-newsletters Unauthenticated File Upload', 'Description' = %q The Wordpress plugin "MailPoet Newsletters"...
Wordpress MailPoet (wysija-newsletters) Unauthenticated File Upload
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress MailPoet wysija-newsletters Unauthenticated File Upload', 'Description' = %q The Wordpress plugin "MailPoet Newsletters"...
Wordpress MailPoet (wysija-newsletters) Unauthenticated file Upload
The Wordpress plugin "MailPoet Newsletters" wysija-newsletters before 2.6.7 is vulnerable to an unauthenticated file upload. The exploits uses the upload Theme functionality to upload a zip file containing the payload. The plugin used the admininit hook without knowning the hook is also executed...
Critical Vulnerability in Wordpress Plugin Could Allow Site Takeover
WordPress users that have a popular plugin installed are being cautioned to upgrade immediately. A vulnerability in the plugin, MailPoet, could essentially allow an attacker to take over any site running it without authentication. MailPoet, formerly Wysija, allows developers running WordPress to...
Wordpress MailPoet Newsletters (wysija-newsletters) Unauthenticated File Upload
The Wordpress plugin "MailPoet Newsletters" wysija-newsletters before 2.6.8 is vulnerable to an unauthenticated file upload. The exploit uses the Upload Theme functionality to upload a zip file containing the payload. The plugin uses the admininit hook, which is also executed for unauthenticated...
