Lucene search

K
wpvulndbRyan DewhurstWPVDB-ID:7CBA1DF1-A3CE-412D-BB24-7CB533D3A9BE
HistoryMay 28, 2019 - 12:00 a.m.

Slick Popup <= 1.7.1 - Privilege Escalation

2019-05-2800:00:00
Ryan Dewhurst
wpscan.com
16

EPSS

0.004

Percentile

73.5%

Subscriber users are able to create an administrator account with hardcoded login credentials.

PoC

Hardcoded username β€œslickpopupteam” and its password is OmakPass13#.

EPSS

0.004

Percentile

73.5%

Related for WPVDB-ID:7CBA1DF1-A3CE-412D-BB24-7CB533D3A9BE