WebARX

2 exploits Active since Feb 2020

CVE-2020-8772 METASPLOIT CRITICAL ruby WORKING POC

InfiniteWP Client <1.9.4.5 - Privilege Escalation

The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in.

CVSS 9.8

View Code

EIP-2026-113831 EXPLOITDB ruby WORKING POC

WordPress Plugin InfiniteWP - Client Authentication Bypass (Metasploit)

View Code