CVE-2021-24155

Related Files

WordPress Backup Guard Authenticated Remote Code Execution

Posted Jul 21, 2021

Authored by Ron Jost, Nguyen Van Khanh | Site metasploit.com

This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension which should be of SGBP type. Then, the uploaded payload can be triggered by a call to /wp-content/uploads/backup-guard/<random_payload_name>.php.

tags | exploit, arbitrary, shell, php, file upload

advisories | CVE-2021-24155

SHA-256 | 3cec1dda9d347f45f65889e051e7fd1d9dc38d9c3e6197d8f4224ca67cb32a27

Download | Favorite | View

WordPress Backup Guard 1.5.8 Shell Upload

Posted Jul 5, 2021

Authored by Ron Jost

WordPress Backup Guard plugin version 1.5.8 remote shell upload exploit.

tags | exploit, remote, shell

advisories | CVE-2021-24155

SHA-256 | fff7a31cabb9e677c9b7a571b07bc73bd4e7d93cef73bad084608ead38c240bb

Download | Favorite | View