CVEs-PoC/2014/CVE-2014-2675.md

CVE-2014-2675

Description

Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php.

POC

Reference

• https://security.dxw.com/advisories/csrf-vulnerability-in-wp-html-sitemap-1-2/

Github

• https://github.com/20142995/nuclei-templates