Exploit for WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion CVE-2023-4922

Name: Exploit for WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion CVE-2023-4922
Rating: 5 (28 reviews)

2023-11-06 | CVSS 7.5

## https://sploitus.com/exploit?id=WPEX-ID:968D87C0-AF60-45EA-B34E-8551313CC8DF
Send a GET request to `wpb-show-core/download-file.php` with the path parameter set to an arbitrary file path on the server, 

- "/etc/resolv.conf"
- "/etc/hosts"
- "../../../wp-config.php"