WPTimeCapsulePOC

Backup and Staging by WP Time Capsule 1.21.16 - 身份认证绕过概念验证 最近在 WP Time Capsule 1.21.16 中发现了一个身份认证绕过漏洞（https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/）。此 PoC 演示了该问题的工作原理以及如何利用它。 该 PoC 该 PoC 提供两种不同的选项： 选项 1：获取管理员 cookie 示例： root@kitploit: poc.py http://127.0.0.1/ 选项...

EUVD-2020-31256

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWPJSONPREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies...

CVE-2020-8771

The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWPJSONPREFIX causes the client to be logged in as the first account on the list of administrator accounts...