Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-10140.
PoCs published by PizzaHatHacker, including Metasploit module exploits/unix/webapp/wp_ajax_load_more_file_upload.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary file upload vulnerability in WordPress Ajax Load More plugin version 2.8.1.1, allowing remote code execution by uploading a malicious PHP file. It requires valid WordPress credentials to authenticate and obtain a nonce for the upload process.
Description
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.
Exploits (1)
This Metasploit module exploits an arbitrary file upload vulnerability in WordPress Ajax Load More plugin version 2.8.1.1, allowing remote code execution by uploading a malicious PHP file. It requires valid WordPress credentials to authenticate and obtain a nonce for the upload process.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H