{"uuid": "fc26a97c-7083-40c5-8f8e-bf57042709fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11358", "type": "seen", "source": "https://t.me/hacking_Attack/85578", "content": "hacking: security in practice\nWordpress 5.9.2 RCE?\n\n1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.\n2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce(reverse shell), maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).\n3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access\n4. pastebin wp-scan link here\n5. info links:\n\nhttps://www.tenable.com/plugins/was/113193\n\nhttps://security.snyk.io/vuln/SNYK-JS-JQUERY-174006\n\nhttps://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/\n\nhttps://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\n\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3\n\nAny help is much appreciated!!\n\nsubmitted by /u/wildmuffincake420 \n[link] [comments]", "creation_timestamp": "2026-09-02T01:01:27.598366Z"}