Can I read Wpscan Contest Nonce on EtoBox?

Wpscan Contest Nonce by namnhatdang1601 is a document available to read on EtoBox.

What is Wpscan Contest Nonce about?

The author contests the rejection of two submissions regarding security vulnerabilities in WordPress, arguing that nonce should not be relied upon for authorization. They provide evidence that any logged-in user can generate a nonce for any action, which can lead to privilege escalation. The author offers to provide a proof of concept to demonstrate the vulnerabilities on a fresh WordPress installation.

Author

namnhatdang1601

Language

EN