Coditor <= 1.1 - Arbitrary File Edition, Deletion and Internal Directory Listing in wp-content

The coditorprocessajax AJAX call is missing any CSRF and authorisation checks, allowing low privilege users subscriber+ to read and edit any files in the wp-content folder, as well as list its content. The PoC will be displayed once the issue has been remediated...

Coditor <= 1.1 - Arbitrary File Edition, Deletion and Internal Directory Listing in wp-content

The coditorprocessajax AJAX call is missing any CSRF and authorisation checks, allowing low privilege users subscriber+ to read and edit any files in the wp-content folder, as well as list its content. PoC The PoC will be displayed once the issue has been remediated...

WordPress Coditor plugin <= 1.1 - Arbitrary File Edition, Deletion and Internal Directory Listing in "/wp-content" vulnerabilities

Arbitrary File Edition, Deletion and Internal Directory Listing in "/wp-content" vulnerabilities found by Slavco Mihajloski in WordPress Coditor plugin versions = 1.1. Solution 2020-12-09 - we were unable to find a patched version of this plugin. There's a note from wordpress.org available on the...