CVE-2018-20985 PoC — WordPress wp-payeezy-pay插件输入验证错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20985.yaml

Associated Vulnerability

Title:WordPress wp-payeezy-pay插件输入验证错误漏洞 (CVE-2018-20985)
Description:The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.

Description

WordPress Plugin WP Payeezy Pay is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Payeezy Pay version 2.97 is vulnerable; prior versions are also affected.

File Snapshot


 id: CVE-2018-20985

info:
  name: WordPress Payeezy Pay <=2.97 - Local File Inclusion
  author: daff

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →