Overview

This repository documents the detection of CVE-2021-24762, a vulnerability identified on a WordPress instance through HTTP scanning.

The vulnerability was discovered on the WordPress AJAX endpoint:

/wp-admin/admin-ajax.php

This endpoint is commonly used by WordPress plugins and themes to process asynchronous requests. Improper validation or insecure implementation of AJAX actions may allow attackers to abuse the endpoint.

Scan Result

The following result was obtained from a vulnerability scan:

[CVE-2021-24762] [http] [critical] http://192.168.31.128/wordpress-5.1.15/wordpress/wp-admin/admin-ajax

Information Extracted

Target Environment

The detected target appears to be running:

WordPress 5.1.15

Test URL:

http://192.168.31.128/wordpress-5.1.15/wordpress/wp-admin/admin-ajax

Description

The admin-ajax endpoint in WordPress is responsible for handling AJAX requests from both authenticated and unauthenticated users.

If a plugin or theme registers insecure AJAX actions without proper validation, attackers may interact directly with the endpoint to trigger unintended functionality.

Impact

If successfully exploited, an attacker may be able to:

Execute arbitrary JavaScript in the victim's browser

Steal session cookies or sensitive authentication data

Perform actions on behalf of authenticated users

Modify or manipulate the webpage content or user interface

These attacks are typically executed by tricking a victim (often an administrator) into clicking a specially crafted malicious link.

Mitigation

To mitigate this vulnerability:

Update the Contact Form by Supsystic plugin to version 1.7.15 or later

Properly sanitize and validate all user inputs

Escape output before rendering it in the browser

Follow WordPress security best practices for plugin development and input handling

Lab

Lab Setup Guide