==================================================================================================================== # Exploit Title: Wordpress Developer Formatter CSRF Vulnerability # Date: 21/01/13 # Author: Junaid Hussain -[ illSecure Research Group ] - # Contact: illSecResearchGroup@Gmail.com | Website: illSecure.com # Software Link: http://wordpress.org/extend/plugins/devformatter/ # Tested on Wordpress Version 3.5, Should work on all versions. # Google Dork: inurl:devformatter/devformatter.php ==================================================================================================================== [#] Vulnerable Code Page: devinterface.php - Line: 46
[#] no nonce given - Read: http://codex.wordpress.org/Function_Reference/wp_nonce_field ==================================================================================================================== // CSRF Exploit:
==================================================================================================================== [#] copyclipboartext & devfmtcss are both vulnerable to persistent xss which could lead to cookie stealing, malware distribution or even a defacememnt. [#] Disclaimer: This exploit is for Research/Educational/Academic purposes only, The Author of this exploit takes no responsibility for the way you use this exploit, you are responsible for your own actions. ==================================================================================================================== Original: http://illsecure.com/code/Wordpress-DevFormatter-CSRF-Vulnerability.txt