.. / CVE-2022-1580

• Auth Bypass
• Nuclei
• Web

Exploit for Site Offline WP Plugin < 1.5.3 - Authorization Bypass (CVE-2022-1580)

Description:

The plugin prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL’s query string would bypass the plugin’s main feature.

Nuclei Template

View the template here CVE-2022-1580.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1580.yaml

References: