Ultimate Addons for Visual Composer <= 3.16.11 - Authenticated XSS, CSRF, RCE

[Proxifier]

привет хацкеры! у меня есть уязвимость Ultimate Addons for Visual Composer <= 3.16.11 - Authenticated XSS, CSRF, RCE

я знаю что установлена версия 3.16.6

но я не понимаю как эксплуатировать ее, например RCE

[+] Name: Ultimate_VC_Addons
|  Location: https://HOST/wp-content/plugins/Ultimate_VC_Addons/
|  Changelog: https://HOST/wp-content/plugins/Ultimate_VC_Addons/changelog.txt
[!] Directory listing is enabled: https://HOST/wp-content/plugins/Ultimate_VC_Addons/

                    [!] We could not determine a version so all vulnerabilities are printed out

                    [!] Title: Ultimate Addons for Visual Composer <= 3.16.11 - Authenticated XSS, CSRF, RCE
                        Reference: Ultimate Addons for Visual Composer <= 3.16.11 - Authenticated XSS, CSRF, RCE
                        Reference: Ultimate Addons for Visual Composer v3.16.10 XSS, CSRF, RCE
                        Reference: Ultimate Addons for WPBakery Page Builder (formerly Visual Composer)
                    Fixed in: 3.16.12

сообщение об уязвимости получено приложением WPScan

WPScan: WordPress Security

A WordPress vulnerability database for WordPress core security vulnerabilities, plugin vulnerabilities and theme vulnerabilities.

wpvulndb.com

Ultimate Addons for Visual Composer v3.16.10 XSS, CSRF, RCE

After looking at Visual Composer and LayerSlider on CodeCanyon.net, the next item in the popular section is the Ultimate Addons for Visual Composer developed by BrainstormForce. I started looking for the low hanging fruits like $_GET, $_POST, $_COOKIE, admin_init, wp_ajax, etc, and the search...

wphutte.com

Ultimate Addons for WPBakery Page Builder

Extend WPBakery Page Builder and add more power to it! This plugin adds several premium elements in your WPBakery Page Builder on top of the built-in ones given by WPBakery. Every single...

codecanyon.net

WordPress Plugin Ultimate Addons for Visual Composer Multiple Vulnerabilities (3.16.10) - Vulnerabilities - Acunetix

WordPress Plugin Ultimate Addons for Visual Composer is prone to multiple vulnerabilities, including cross-site scripting, cross-site request forgery and remote comma...

www.acunetix.com

я перерыл пол гугла но ничего не нашел, и я не прошу что-либо искать за меня.
мне просто нужны хотя бы косвенные источники информации.
буду благодарен любой информации по этому поводу в частности эксплуатации RCE.

 

[drkkzr]

привет хацкеры! у меня есть уязвимость Ultimate Addons for Visual Composer <= 3.16.11 - Authenticated XSS, CSRF, RCE

я знаю что установлена версия 3.16.6

но я не понимаю как эксплуатировать ее, например RCE

[+] Name: Ultimate_VC_Addons
|  Location: https://HOST/wp-content/plugins/Ultimate_VC_Addons/
|  Changelog: https://HOST/wp-content/plugins/Ultimate_VC_Addons/changelog.txt
[!] Directory listing is enabled: https://HOST/wp-content/plugins/Ultimate_VC_Addons/

                    [!] We could not determine a version so all vulnerabilities are printed out

                    [!] Title: Ultimate Addons for Visual Composer <= 3.16.11 - Authenticated XSS, CSRF, RCE
                        Reference: Ultimate Addons for Visual Composer <= 3.16.11 - Authenticated XSS, CSRF, RCE
                        Reference: Ultimate Addons for Visual Composer v3.16.10 XSS, CSRF, RCE
                        Reference: Ultimate Addons for WPBakery Page Builder (formerly Visual Composer)
                    Fixed in: 3.16.12

сообщение об уязвимости получено приложением WPScan

WPScan: WordPress Security

A WordPress vulnerability database for WordPress core security vulnerabilities, plugin vulnerabilities and theme vulnerabilities.

wpvulndb.com

Ultimate Addons for Visual Composer v3.16.10 XSS, CSRF, RCE

After looking at Visual Composer and LayerSlider on CodeCanyon.net, the next item in the popular section is the Ultimate Addons for Visual Composer developed by BrainstormForce. I started looking for the low hanging fruits like $_GET, $_POST, $_COOKIE, admin_init, wp_ajax, etc, and the search...

wphutte.com

Ultimate Addons for WPBakery Page Builder

Extend WPBakery Page Builder and add more power to it! This plugin adds several premium elements in your WPBakery Page Builder on top of the built-in ones given by WPBakery. Every single...

codecanyon.net

WordPress Plugin Ultimate Addons for Visual Composer Multiple Vulnerabilities (3.16.10) - Vulnerabilities - Acunetix

WordPress Plugin Ultimate Addons for Visual Composer is prone to multiple vulnerabilities, including cross-site scripting, cross-site request forgery and remote comma...

www.acunetix.com

я перерыл пол гугла но ничего не нашел, и я не прошу что-либо искать за меня.
мне просто нужны хотя бы косвенные источники информации.
буду благодарен любой информации по этому поводу в частности эксплуатации RCE.

Присоединяюсь к вопросу