[wp-trac] [WordPress Trac] #60487: Information Disclosure to achieve RCE (REMOTE CODE EXECUTION)

WordPress Trac noreply at wordpress.org
Fri Feb 9 14:58:59 UTC 2024


#60487: Information Disclosure to achieve RCE (REMOTE CODE EXECUTION)
-------------------------------------------------+-------------------------
 Reporter:  modsmilzo                            |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  XML-RPC                              |     Version:  6.4.1
 Severity:  critical                             |  Resolution:
 Keywords:  needs-patch needs-refresh has-       |     Focuses:
  privacy-review                                 |  administration
-------------------------------------------------+-------------------------
Changes (by modsmilzo):

 * Attachment "BugWordpress.docx" added.

 In the attached file are the images of the proof of concept

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/60487>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list