Lucene search

K
wpvulndbDaniel RufWPVDB-ID:7B6F91CD-5A00-49CA-93FF-DB7220D2630A
HistoryAug 29, 2022 - 12:00 a.m.

Site Offline < 1.5.3 - Access Bypass

2022-08-2900:00:00
Daniel Ruf
wpscan.com
9

0.001 Low

EPSS

Percentile

30.3%

The plugin prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL’s query string would bypass the plugin’s main feature.

PoC

https://example.com/?admin

CPENameOperatorVersion
site-offlinelt1.5.3

0.001 Low

EPSS

Percentile

30.3%

Related for WPVDB-ID:7B6F91CD-5A00-49CA-93FF-DB7220D2630A