Description
WordPress Plugin存在权限提升漏洞。该漏洞是由于应用程序对用户权限校验不足导致的。
WordPress Plugin CVE-2021-34621 权限提升漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-34621
https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/
https://github.com/RandomRobbieBF/CVE-2021-34621
https://www.exploit-db.com/exploits/50242
https://wpscan.com/vulnerability/af54762b-29c9-4529-8ebd-f4ba7fde2c95/
https://www.cve.org/CVERecord?id=CVE-2021-34621
https://packetstormsecurity.com/files/163973/WordPress-ProfilePress-3.1.3-Privilege-Escalation.html
https://www.tenable.com/cve/CVE-2021-34621
https://vulners.com/cve/CVE-2021-34621
https://cvefeed.io/vuln/detail/CVE-2021-34621