{"uuid": "bcc75fe0-4f45-4f41-95f4-69d2ae204fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/hacking_Attack/102012", "content": "Black Hat Ethical Hacking\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC Release\n\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC ReleasePost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes High-severity reflected cross-site scripting (XSS) flawHackers are wasting no time in exploiting a recently addressed vulnerability in the WordPress Advanced Custom Fields plugin, as they swiftly took advantage of a publicly available proof-of-concept (PoC) exploit just 24 hours after its disclosure.\n\nThe vulnerability, identified as CVE-2023-30777, is a high-severity reflected cross-site scripting (XSS) flaw that enables unauthorized attackers to extract sensitive information and escalate their privileges on targeted WordPress sites.\n\nDiscovered by website security firm Patchstack on May 2nd, 2023, the vulnerability was promptly disclosed, including a PoC exploit, on May 5th, a day after the plugin vendor released a security update with version 6.1.6.\n\nAccording to a report from the Akamai Security Intelligence Group (SIG), significant scanning and exploitation activities were observed starting from May 6th, 2023, using the provided sample code in Patchstack\u2019s disclosure.\n\n\u201cThe Akamai SIG analyzed XSS attack data and identified attacks starting within 24 hours of the exploit PoC being made public,\u201d the report stated.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Attackers Utilize Patchstack\u2019s Sample Code in WordPress Vulnerability What makes this situation particularly noteworthy is that the threat actor replicated and utilized the sample code from Patchstack\u2019s write-up.\n\nWith over 1.4 million websites still running the vulnerable version of the impacted WordPress plugin, based on wordpress.org statistics, attackers have an extensive attack surface to target.\n\nExploiting the XSS flaw requires the involvement of a logged-in user with plugin access, enabling the execution of malicious code in their browser, thereby granting the attackers elevated privileges on the site.\n\nDespite this requirement, the malicious scans demonstrate that threat actors remain undeterred, relying on basic deception and social engineering to overcome this mitigation factor.\n\nFurthermore, the exploit works on default configurations of the affected plugin versions, increasing the likelihood of success for attackers without the need for additional efforts.\nTrending: Maximizing IDOR Detection with Burp Suite\u2019s Autorize Trending: OSINT Tool: GooFuzz WordPress Administrators Urged to Patch Vulnerable PluginsWordPress site administrators using the vulnerable plugins are strongly advised to immediately apply the available patch to protect against ongoing scanning and exploitation attempts.\n\nThe recommended course of action is to update both the \u2018Advanced Custom Fields\u2019 free and pro plugins to version 5.12.6 (backported) and 6.1.6, respectively.\nTrending: CACTUS Ransomware Exploits VPN Flaws to Infiltrate Corporate Networks\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/Images-f[...]", "creation_timestamp": "2026-09-01T20:00:58.421610Z"}