💣Exploit CVE-2020-36837 - WordPress ThemeGrill Demo Importer Plugin Authentication Bypass Vulnerability

[Mental_Outlaw]

CVE ID : CVE-2020-36837
Published : Oct. 16, 2024, 7:15 a.m. | 4 hours, 55 minutes ago
Description : The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there is a user named 'admin', the attacker will become automatically logged in as an administrator.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.