CVE-2017-20251
CRITICALWordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API
Title source: cnaExploitation Summary
EIP tracks 2 public exploits for CVE-2017-20251. PoCs published by CrashBandicot, Polosss.
AI-analyzed exploit summary This exploit leverages the WordPress REST API vulnerability (CVE-2017-20251) to inject malicious PHP code via the 'Insert PHP' plugin. The PoC demonstrates how an attacker can send a crafted HTTP POST request to execute arbitrary PHP code on a vulnerable WordPress site.
Description
WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can send POST requests to the wp-json/wp/v2/posts endpoint with crafted content containing insert_php shortcodes to include and execute remote PHP files on the server.
Exploits (2)
This exploit leverages the WordPress REST API vulnerability (CVE-2017-20251) to inject malicious PHP code via the 'Insert PHP' plugin. The PoC demonstrates how an attacker can send a crafted HTTP POST request to execute arbitrary PHP code on a vulnerable WordPress site.
This repository contains a functional exploit PoC for CVE-2017-20251, demonstrating PHP code injection via the Insert PHP plugin's [insert_php] shortcode. The script automates post creation with malicious shortcode content and verifies RCE by checking for a marker file.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H