CVE-2023-4278 — Wordpress 插件 Masterstudy LMS <= 3.0.17 - 未认证讲师账户创建。 | Kitploit

CVE-2023-4278

[vulnerable.png]

Exploit Title: Wordpress Plugin Masterstudy LMS <= 3.0.17 - Unauthenticated Instructor Account Creation
Google Dork: inurl:/user-public-account
Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/
Software Link: https://stylemixthemes.com
Version: <= 3.0.17
CVE : CVE-2023-4278

漏洞利用

$ git clone https://github.com/revan-ar/CVE-2023-4278
$ cd CVE-2023-4278/
$ python exploit.py

参考链接：

https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235

捐赠