Metasploit Weekly Wrap-Up

Authentication bypass in Wordpress Plugin WooCommerce Payments

This week's Metasploit release includes a module for CVE-2023-28121 by h00die. This module can be used against any wordpress instance that uses WooCommerce payments < 5.6.1. This module exploits an auth by-pass vulnerability in the WooCommerce WordPress plugin. You can simply

auth authentication authentication bypass bypass cve cve-2023-28121 exploits instance metasploit metasploit weekly wrapup pass payments plugin release vulnerability week weekly woocommerce wordpress wordpress plugin wrap-up