admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 09:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

add WordPress Plugin Mailpress 4.5.2 RCE

Browse Source
This commit is contained in:
gobysec 2021-07-28 17:31:28 +08:00
parent e8865f7de9
commit 9d72c8537b
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
WordPress/Mailpress/WordPress_Plugin_Mailpress_4.5.2_RCE.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 622 KiB

11
WordPress/Mailpress/WordPress_Plugin_Mailpress_4.5.2_RCE.md Normal file
View File

@ -0,0 +1,11 @@
# WordPress Plugin Mailpress 4.5.2 RCE
In the WordPress Mailpress Plugin, the subject parameter in the iview function in the mailpress/mp-includes/class/MP_Actions.class.php file is not filtered, and pass to do_eval function, leading to remote code execution.
**Affected version**: WordPress Plugin Mailpress <= 4.5.2
**FOFA query rule**: [app="WordPress"](https://fofa.so/result?qbase64=YXBwPSJXb3JkUHJlc3Mi)
# Demo
![](WordPress_Plugin_Mailpress_4.5.2_RCE.gif)