writeups.xyz / WordPress 5.1 CSRF to Remote Code Execution

Submitter : c2a

Date: 13 March 2019

Bounty : 950

Vulnerabilities :

• CSRF
• RCE
• HTML Injection

Programs :

• WordPress

Authors :

• Simon Scannell (@Scannell_simon)

Link :
https://www.sonarsource.com/blog/wordpress-csrf-to-rce/