WPTimeCapsulePOC

Backup and Staging by WP Time Capsule 1.21.16 - 인증 우회 개념 증명 WP Time Capsule 1.21.16에서 인증 우회Authentication Bypass 취약점이 최근 발견되었습니다 https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/. 이 PoC는 해당 문제가 어떻게 동작하며 어떻게 악용될 수 있는지를 증명합니다. The PoC 이 PoC는 두 가지 옵션을 제공합니다: 사례 1: 관리자 쿠...

EUVD-2020-31256

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWPJSONPREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies...

CVE-2020-37255: Authentication Bypass Using an Alternate Path or Channel

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWPJSONPREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies...

CVE-2020-8771

The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWPJSONPREFIX causes the client to be logged in as the first account on the list of administrator accounts...

CVE-2020-8771: Improper Authentication

The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWPJSONPREFIX causes the client to be logged in as the first account on the list of administrator accounts...