.. / CVE-2018-16299

• LFI
• Nuclei
• Web

Exploit for WordPress Localize My Post 1.0 - Local File Inclusion (CVE-2018-16299)

Description:

WordPress Localize My Post 1.0 is susceptible to local file inclusion via the ajax/include.php file parameter.

Nuclei Template

View the template here CVE-2018-16299.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-16299.yaml

References: