Ashiyane DST Discover WordPress Userpro Remote File Upload Bug

Userpro Wordpress Userpro Remote File Upload

Security researchers at Iranian team Ashiyane Digital Security Team have discover remote file upload vulnerability in Wordpress -Google Dork: inurl:/wp-content/plugins/userpro/- Vulnerability risk is rated as high by

This module -requires using Metasploit- exploits an arbitrary PHP code upload in the wordpress Ifileupload plugin The vulnerability allows for unauthorization file upload and remote code execution.


Exploit is make by: T3rm!nat0r5

All vulns find by Ashiyane:

T3rm!nat0r5 contact: [email protected]
Ashiyane home:

Leave a Reply

Your email address will not be published. Required fields are marked *