writeups.xyz / WordPress GiveWP POP to RCE (CVE-2024-5932)

Submitter : c2a

Date: 26 August 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• PHP Pop Chain
• PHP Object Injection
• Security Code Review

Programs :

• Wordfence

Authors :

• Julien Ahrens (@MrTuxracer)

Link :
https://www.rcesecurity.com/2024/08/wordpress-givewp-pop-to-rce-cve-2024-5932/