writeups.xyz / Exploiting authorization by nonce in WordPress plugins

Submitter : c2a

Date: 5 August 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Arbitrary File Upload
• SQL Injection
• Security Code Review

Programs :

• Wordfence

Authors :

• Bartek Nowotarski

Link :
https://nowotarski.info/wordpress-nonce-authorization/