Wordpress Social Warfare Plugin (Rfi to Rce)
The flaw that has been used for already widespread ad injection is abusing the function which retrieves the code from the swp_url parameter and saves it as Social Warfare plugin settings. That behavior allows the attacker to inject code that will be run in the web browser of the visitors when social warfare buttons are loaded.
Exploit info :
https://hastebin.com/raw/leqosucali
If You face any Problem
You can Contact with US
..............................................................................................................
Contact:
..............................................................................................................
Facebook:
/ error.squad.bh
Please Don't Forget To Subscribe & Like
==============================
This tutorial is just for educational purpose only.......