Description
RepairBuddy 是一款用于管理计算机维修业务的 WordPress 插件。该插件的文件上传功能存在漏洞，攻击者可以通过上传特制的 PHP 文件执行恶意代码，可能导致服务器被完全控制、敏感信息泄露或数据篡改。
WordPress Plugin RepairBuddy /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2024-51793）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-51793
https://patchstack.com/database/Wordpress/Plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-3-8115-arbitrary-file-upload-vulnerability
https://github.com/Nxploited/CVE-2024-51793
https://wpscan.com/vulnerability/b2e75c52-7c06-4733-b7a3-0f2e5c6f001b/
https://www.cve.org/CVERecord?id=CVE-2024-51793
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/computer-repair-shop
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-51793
https://vulners.com/cve/CVE-2024-51793
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11