writeups.xyz / WordPress Privilege Escalation through Post Types

Submitter : c2a

Date: 17 December 2018

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation
• Stored XSS
• Object Injection

Programs :

• WordPress

Authors :

• Simon Scannell (@Scannell_simon)

Link :
https://www.sonarsource.com/blog/wordpress-post-type-privilege-escalation/