
Based on CVE-2022-3590, WordPress <= 6.9.1 - Unauthenticated Blind SSRF via XML-RPC Pingback Discovery proof of concept (PoC)
The exploit has no cve assigned.
Affected Versions
WordPress <= 6.9.1 - Unauthenticated Blind SSRF via XML-RPC Pingback Discovery proof of concept (PoC)
pip install requestsWORDPRESS_URL, TARGET_POST and CALLBACK_URL)python main.py