PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Phát hiện lỗ hổng nghiêm trọng trong plugin WordPress của 400.000 website

blog.viettelcybersecurity.com | blog | #authentication-bypass | #wordpress | #vulnerability | #plugin | #patch | #cms
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Authentication bypass flaws in InfiniteWP Client, WP Time Capsule and WP Database Reset plugins exposed 400,000 WordPress sites to unauthenticated admin logins; patches were released.
Published
Collected

Related coverage

vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
vulnerability · pwn.ai
Click2Shell: Preauth WordPress Core Theme Preview Injection to RCE Chain
pwn.ai chained a pre-auth theme preview injection in WordPress Core with a flaw in the mobile-repair-zone catalog theme to achieve unauthenticated RCE via a single crafted link. Fixed in the WordPress 7.1.1 security release; CVE pending.
research · aretiq.ai
CVE-2026-61967 — miniOrange OTP Verification Ultimate Member Password Reset Authentication Bypass
This research provides technical context that security teams can use for monitoring and validation.
blog · blog.viettelcybersecurity.com
Broken access control in GoAnywhere Admin portal
A GoAnywhere Admin Portal access-control flaw lets attackers bypass SecurityFilter using path traversal (/a/../) and reach the setup page, enabling unauthenticated creation of an admin account.
blog · portswigger.net
Using Burp Extender
A worked example of Burp Extender based on Daniele Costa's plugin that extracts HTML comments from proxied responses, covering compiling the Java code, packaging a JAR and loading it into Burp.
blog · portswigger.net
[MoBP] Burp Extender extended
Burp Extender gains registerExtenderCallbacks, exposing methods for third-party code to make raw HTTP requests and send items to Repeater, Intruder, the Spider and the scanner.
Back