CVE-2024-54363
CRITICALnssTheme Wp NssUser Register <1.0.0 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-54363. PoCs published by Nxploited, Boshe99, RandomRobbieBF.
AI-analyzed exploit summary This PoC exploits an Incorrect Privilege Assignment vulnerability in the Wp NssUser Register WordPress plugin, allowing unauthenticated users to register as administrators. The script checks the plugin version and sends a crafted POST request to escalate privileges.
Description
Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through <= 1.0.0.
Exploits (3)
This PoC exploits an Incorrect Privilege Assignment vulnerability in the Wp NssUser Register WordPress plugin, allowing unauthenticated users to register as administrators. The script checks the plugin version and sends a crafted POST request to escalate privileges.
The repository contains functional exploit code for CVE-2024-54363, targeting an arbitrary file upload vulnerability in the WordPress Plugin 3DPrint Lite 1.9.1.4. The exploit demonstrates the ability to upload a malicious file to a vulnerable target.
This PoC demonstrates an unauthenticated privilege escalation vulnerability in the Wp NssUser Register WordPress plugin (version <= 1.0.0). The exploit sends a crafted POST request to register a new user with administrator privileges.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H