Description
WordPress Bricks Builder存在远程代码执行漏洞，此漏洞是由于bricks/v1接口对用户的请求验证不当导致的。
WordPress Bricks Builder CVE-2024-25600 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-25600
https://patchstack.com/articles/critical-rce-patched-in-bricks-builder-theme
https://snicco.io/vulnerability-disclosure/bricks/unauthenticated-rce-in-bricks-1-9-6
https://www.sentinelone.com/vulnerability-database/cve-2024-25600/
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-25600-wordpress-bricks-builder-rce-vulnerability
https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT
https://research.splunk.com/web/56a8771a-3fda-4959-b81d-2f266e2f679f/
https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-bricks-remote-code-execution-1-9-6/
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-25600
https://op-c.net/blog/cve-2024-25600-wordpresss-bricks-builder-rce-flaw-under-active-exploitation/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-themes/bricks/bricks-196-unauthenticated-remote-code-execution
https://medium.com/@chinamayjoshi/unauthenticated-remote-code-execution-rce-vulnerability-in-bricks-builder-for-wordpress-a12132c91cc1