WordPress Exploit Archives — LinuxSec Exploit https://exploit.linuxsec.org/category/web-hacking/wordpress-exploit/ Nothing is Ever Locked Wed, 14 Aug 2019 17:41:28 +0000 en-US hourly 1 https://wordpress.org/?v=6.4.3 WordPress 4.7.0/4.7.1 Content Injection Exploit https://exploit.linuxsec.org/wordpress-470471-content-injection/ https://exploit.linuxsec.org/wordpress-470471-content-injection/#comments Thu, 02 Feb 2017 20:18:00 +0000 https://exploit.linuxsec.org/2017/02/03/wordpress-470471-content-injection/ Celah ini menginfeksi  WordPress REST API yang ditambahkan secara default pada WordPress 4.7.0. Salahsatu API tersebut memungkinkan kita mengupdate menghapus mengedit dan menambahkan konten di WordPress. Sayangnya fitur ini malah memiliki celah yangmana pengunjung situs yang bukan admin pun dapat mengupdate konten website melalui API tersebut. Untuk detail lebih jauh cek di https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html Exploit : WordPress […]

The post WordPress 4.7.0/4.7.1 Content Injection Exploit appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/wordpress-470471-content-injection/feed/ 4 Exploit WordPress Ajax Load More PHP Upload Vulnerability https://exploit.linuxsec.org/exploit-wordpress-ajax-load-more-php/ https://exploit.linuxsec.org/exploit-wordpress-ajax-load-more-php/#respond Tue, 03 Nov 2015 05:19:00 +0000 https://exploit.linuxsec.org/2015/11/03/exploit-wordpress-ajax-load-more-php/ Yooshh.. jumpa lagi kali ini saya akan share tutorial Wordpress Ajax Load More PHP Upload Vulnerability. Exploit ini membutuhkan metasploit. Jadi yang belum install , bisa install dulu. Exploit source nya dari Exploit-DB . Langsung saja ke tutorial. Download Exploit nya disini : https://www.exploit-db.com/exploits/38660/ Tambahkan module diatas ke metasploit kalian . Jika masih ada yang bingung bisa […]

The post Exploit WordPress Ajax Load More PHP Upload Vulnerability appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/exploit-wordpress-ajax-load-more-php/feed/ 0 Deface WordPress dengan Exploit Themes Qualifire File Upload Vulnerability https://exploit.linuxsec.org/deface-wordpress-dengan-exploit-themes/ https://exploit.linuxsec.org/deface-wordpress-dengan-exploit-themes/#comments Fri, 05 Jun 2015 14:40:00 +0000 https://exploit.linuxsec.org/2015/06/05/deface-wordpress-dengan-exploit-themes/ Yuppp.. lama ya tidak share exploit deface. Kali ini saya mau share tutorial deface WordPress dengan Exploit Themes Qualifire File Upload Vulnerability . Exploit nya sudah lama sih sebenarnya, namun gak tau kenapa sekarang “bersemi kembali” . Oke gak usah lama lama , langsung saja . Bahan : HTML Exploit : download Google Dorks : inurl:”/wp-content/themes/qualifire” […]

The post Deface WordPress dengan Exploit Themes Qualifire File Upload Vulnerability appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/deface-wordpress-dengan-exploit-themes/feed/ 1 Deface WordPress dengan Exploit WordPress Plugins WPShop File Upload Vulnerability https://exploit.linuxsec.org/wpshop-file-upload/ https://exploit.linuxsec.org/wpshop-file-upload/#respond Sun, 17 May 2015 20:31:00 +0000 https://exploit.linuxsec.org/2015/05/18/deface-wordpress-dengan-exploi/ Mau share aja exploit yang ditemukan oleh saya dan teman saya dari Indonesian Cyber Army, Mr.Xenophobic. Nama nya Exploit WordPress Plugins WPShop File Upload Vulnerability. Fuck 1337day.com for reject this exploit =)) Exploiter : Exploit WordPress Plugins WPShop File Upload Vulnerability – Click Here Google Dork : inurl:?wpshop_product_category= Use your brain, bitch ! Vuln Victim […]

The post Deface WordPress dengan Exploit WordPress Plugins WPShop File Upload Vulnerability appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/wpshop-file-upload/feed/ 0 Exploit WordPress Plugin WP Mobile Edition Local File Disclosure Vulnerability https://exploit.linuxsec.org/exploit-wordpress-plugin-wp-mobile/ https://exploit.linuxsec.org/exploit-wordpress-plugin-wp-mobile/#respond Wed, 15 Apr 2015 11:04:00 +0000 https://exploit.linuxsec.org/2015/04/15/exploit-wordpress-plugin-wp-mobile/ Yupp, kali ini mau share lagi exploit pada WordPress yang memiliki celah pada plugins WP Mobile Edition. Plugin ‘WP Mobile Edition’ ini tidak memfilter parameter GET file di /themes/mTheme-Unus/css/css.php . Alhasil kita juga dapat melihat source dari konfigurasi WordPress yang terletak di wp-config.php . Oke langsung saja. Google Dorks : inurl:?fdx_switcher=mobile Exploit : 127.0.0.1/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php Tested […]

The post Exploit WordPress Plugin WP Mobile Edition Local File Disclosure Vulnerability appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/exploit-wordpress-plugin-wp-mobile/feed/ 0