cve/2019/CVE-2019-11223.md

CVE-2019-11223

Description

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

POC

Reference

• https://wpvulndb.com/vulnerabilities/9488
• https://www.pluginvulnerabilities.com/2019/04/05/arbitrary-file-upload-vulnerability-in-supportcandy/

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/nuclei-templates
• https://github.com/AngelCtulhu/CVE-2019-11223
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub