Description
(CVE-2024-1071) WordPress 插件 代码注入漏洞
(CVE-2024-1071) WordPress 插件 代码注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-1071
https://avd.aliyun.com/detail?id=AVD-2024-1071
https://wpscan.com/vulnerability/dcca7ed0-b088-4b7d-9e22-07b858367975/
https://www.wordfence.com/blog/2024/02/2063-bounty-awarded-for-unauthenticated-sql-injection-vulnerability-patched-in-ultimate-member-wordpress-plugin/
https://www.sentinelone.com/vulnerability-database/cve-2024-1071/
https://www.securityweek.com/critical-flaw-in-popular-ultimate-member-wordpress-plugin/
https://thehackernews.com/2024/02/wordpress-plugin-alert-critical-sqli.html
https://github.com/gh-ost00/CVE-2024-1071-SQL-Injection
https://www.rapid7.com/db/modules/auxiliary/scanner/http/wp_ultimate_member_sorting_sqli/
https://cve.imfht.com/detail/CVE-2024-1071