$1500 Bounty : Local File Inclusion Vulnerability | Manual Exploitation | Bug Bounty POC
#BugBounty #EthicalHacking #PenetrationTesting
The vulnerability was discovered in March 2016 and was patched in version 1.1 of the plugin. However, many websites are still using the vulnerable version of the plugin.
To exploit the vulnerability, an attacker would need to visit a page on the WordPress site that includes the Advanced Video Embed plugin. They could then enter a specially crafted URL in the address bar that would cause the plugin to download the file they specify.
The vulnerability has been exploited in the wild. In 2016, a security researcher reported that the vulnerability was being used to download wp-config.php files from WordPress sites.
#crosssitescripting #xss
#sqlinjection
#denialofservice #dos
#crosssiterequestforgery #csrf
#informationdisclosure
#authenticationbypass
#sessionmanagement
#fileupload
#apisecurity
#mobilesecurity
#iotsecurity
#cloudsecurity