{"uuid": "5e7a31a0-0a31-4a2e-b6fc-a694b7bc5a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11358", "type": "seen", "source": "https://t.me/hacking_Attack/85576", "content": "hacking: security in practice\nWP 5.9.2 - prototype Pollution?\n\n1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.\n2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce, maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).\n3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access\n4. \npastebin wp-scan link here\n\n5. \ninfo links:\nhttps://www.tenable.com/plugins/was/113193\n\nhttps://security.snyk.io/vuln/SNYK-JS-JQUERY-174006\n\nhttps://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/\n\nhttps://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\n\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3\n\nAny help is much appreciated!!\n\nsubmitted by /u/wildmuffincake420 \n[link] [comments]", "creation_timestamp": "2026-09-02T01:01:27.551442Z"}