## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-NT1410-CVE-2021-24762
# Overview
This repository documents the detection of CVE-2021-24762, a vulnerability identified on a WordPress instance through HTTP scanning.
The vulnerability was discovered on the WordPress AJAX endpoint:
/wp-admin/admin-ajax.php
This endpoint is commonly used by WordPress plugins and themes to process asynchronous requests. Improper validation or insecure implementation of AJAX actions may allow attackers to abuse the endpoint.
# Scan Result
The following result was obtained from a vulnerability scan:
[CVE-2021-24762] [http] [critical] http://192.168.31.128/wordpress-5.1.15/wordpress/wp-admin/admin-ajax
# Information Extracted
Field| Value
---|---
CVE| CVE-2021-24762
Protocol| HTTP
Severity| Critical
Target| WordPress
Endpoint
# Target Environment
The detected target appears to be running:
WordPress 5.1.15
Test URL:
http://192.168.31.128/wordpress-5.1.15/wordpress/wp-admin/admin-ajax
# Description
The admin-ajax endpoint in WordPress is responsible for handling AJAX requests from both authenticated and unauthenticated users.
If a plugin or theme registers insecure AJAX actions without proper validation, attackers may interact directly with the endpoint to trigger unintended functionality.
# Impact
If successfully exploited, an attacker may be able to:
Execute arbitrary JavaScript in the victim's browser
Steal session cookies or sensitive authentication data
Perform actions on behalf of authenticated users
Modify or manipulate the webpage content or user interface
These attacks are typically executed by tricking a victim (often an administrator) into clicking a specially crafted malicious link.
# Mitigation
To mitigate this vulnerability:
Update the Contact Form by Supsystic plugin to version 1.7.15 or later
Properly sanitize and validate all user inputs
Escape output before rendering it in the browser
Follow WordPress security best practices for plugin development and input handling
## Lab
Lab Setup Guide