Exploit for WordPress Unyson 2.7.28 Backup Disclosure

Name: Exploit for WordPress Unyson 2.7.28 Backup Disclosure
Rating: 5 (187 reviews)

2023-06-16 | CVSS 7.1

## https://sploitus.com/exploit?id=PACKETSTORM:172942
====================================================================================================================================  
| # Title : WordPress - Unyson 2.7.28 Backup Disclosure Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 108.0.2(64-bit) |   
| # Vendor : http://unyson.io/ |   
| # Dork : "Index of /wp-content/uploads/fw-backup" |  
====================================================================================================================================  
  
P0C :  
  
[+] WordPress - Unyson 2.7.28 appears to leave backups in a world accessible directory under the document root.  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] Use payload : "/wp-content/uploads/fw-backup/"  
  
[+] https://127.0.0.1/dugaidealba/wp-content/uploads/fw-backup/  
  
  
Greetings to :=========================================================================================================================  
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm * thelastvvv *Zigoo.eg |  
=======================================================================================================================================