CVEs-PoC/2016/CVE-2016-10972.md

CVE-2016-10972

Description

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8852
• https://www.exploit-db.com/exploits/39894

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon