wordpress-install: WordPress Exposed Installation

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://s4e.io/tools/wordpress-exposed-installation-page-exposure-scanner
• https://medium.com/@srilakivarma/%EF%B8%8F-%EF%B8%8F-how-i-hacked-a-wordpress-setup-and-gain-admin-privilege-and-got-paid-for-it-98a49433519f
• https://github.com/georgknabl/wordpress-installation-attack
• https://www.exploit-db.com/exploits/18417
• https://developer.wordpress.org/advanced-administration/before-install/howto-install/
• https://github.com/Ostorlab/KEV
• https://www.upguard.com/blog/wordpress-risks

Related Vulnerabilities

• PoCapache-livy-logs: Apache Livy - Logs Exposed
• Wordpress Events Calendar插件敏感信息泄露漏洞（CVE-2025-9808）
• WordPress Directory Kit 插件敏感信息泄露漏洞(CVE-2025-13920)
• PoCCVE-2025-14998: Branda WordPress plugin - Privilege Escalation
• PoCCVE-2022-1281: Photo Gallery WordPress v1.6.3 - SQL Injection
• PoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation
• PoCds-store-file: DS_Store File - Exposed
• PoCsimple-file-list-rce: WordPress Simple File List <=4.2.2 - Remote Code Execution
• PoCCVE-2026-13147: WordPress Kirki < 6.0.12 - Server-Side Request Forgery
• PoCCVE-2026-14894: WordPress Super Forms <= 6.3.313 - Arbitrary File Upload
• PoCCVE-2026-17505: WordPress TranslatePress < 3.2.6 - Cross-Site Scripting
• PoCCVE-2026-64638: WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)
• PoCCVE-2026-67208: Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console