CVEs-PoC/2015/CVE-2015-2792.md

CVE-2015-2792

Description

The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request, which allows remote attackers to bypass nonce checks and perform arbitrary actions via a request containing an action POST parameter, an action GET parameter, and a valid nonce for the action GET parameter.

POC

Reference

• http://klikki.fi/adv/wpml.html
• http://packetstormsecurity.com/files/130839/WordPress-WPML-Missing-Authentication.html
• http://seclists.org/fulldisclosure/2015/Mar/79

Github

• https://github.com/20142995/nuclei-templates