• Home
  • About Us
  • Authors
  • Submit News
  • Contact Us
  • Privacy Policy
  • Sitemap
The Hack Post
  • Hacking News
    • Cyber Crime
  • Cyber Security
  • Technology
    • Internet
  • Entertainment
    • Gaming
  • Business
  • Science / Health
No Result
View All Result
The Hack Post
No Result
View All Result

WordPress Theme “dance-studio” Vulnerable to Arbitrary Shell Upload

Afrasiab Khan by Afrasiab Khan
February 14, 2017
Wordpress Theme "dance-studio" Vulnerable to Arbitrary Shell Upload
Share on FacebookShare on Twitter

A vulnerability in the WordPress theme “dance-studio” has been discovered allowing attackers to upload malicious files like a shell, onto the targeted website. The exploit was posted to the exploit database, “0.day.today?” and has been authored by a security analyst going by the alias of xBADGIRL21. The exploit when used uploads a shell file onto the website through the “/wp-content/uploads/” directory path.

Screenshot of full exploit uploaded onto 0day.today? exploit database by xBADGIRL21
Screenshot of full exploit uploaded onto 0day.today? exploit database by xBADGIRL21

xBADGIRL21 also uploaded a YouTube video showing proof as to how the exploit can be used to breach WordPress websites who have the theme installed. The exploit runs a html script that grants permission to the hacker to upload any file they desire.

Video proof of concept (PoC) of the exploitation of the vulnerability uploaded to YouTube by author xBADGIRL21:

Code used to upload the shell onto the dance-studio themed WordPress website:

Screenshot of html code of the exploit
Screenshot of html code of the exploit

WordPress itself has nothing to do with the bugs found. It is solely an issue with the code the programmers of the theme have implemented. The theme creators and coders are not yet aware of the exploit as of yet since no patch has been made or deployed. The creators of the dance-studio theme have not addressed the critical vulnerability as of yet either.

Tags: WordpressWordpress Theme
Afrasiab Khan

Afrasiab Khan

A newbie writer at The Hack Post. Completely in love with technology. Writing has always been a passion of mine and so is hacking. Combine them together and you get me. A bit of experience in the fields of cyber security and looking to expand on that in the times to come. As a student of Engineering, being an author at The Hack Post helps me cope with the stress that comes with that.

Next Post
UK Police Website Hacked

UK Police Website Hacked by Turkish Hackers

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Latest Articles

The Benefits Of A Chair Massage
Science / Health

The Benefits Of A Chair Massage

December 7, 2020
How Do I Know If I Need A Proxy?
Technology

How Do I Know If I Need A Proxy?

December 5, 2020
How Do I Know When My Business Needs A Proxy?
Technology

How Do I Know When My Business Needs A Proxy?

December 3, 2020
5 Tricks For Git You May Not Use Yet
Technology

5 Tricks For Git You May Not Use Yet

December 2, 2020
6 Ways to give a new look to your Car
Business

6 Ways to give a new look to your Car

December 2, 2020
A Guide to Start Your Career in the Field of Cybersecurity
Cyber Security

A Guide to Start Your Career in the Field of Cybersecurity

December 1, 2020
MOVEMENT OF PLANETS ROTATION AND REVOLUTION 01
Science / Health

Movement of Planets: Rotation And Revolution

December 1, 2020
Smart Homes Make for Smart Investments When Properly Secured
Technology

Smart Homes Make for Smart Investments When Properly Secured

December 1, 2020
8 cybersecurity trends to watch out for in 2021
Technology

8 cybersecurity trends to watch out for in 2021

December 1, 2020
Can Learn From Hackers
Hacking News

What A Beginning Programmer

December 1, 2020
Tips for working with a game art outsourcing studio
Technology

Tips for Working With a Game Art Outsourcing Studio

November 30, 2020
Beginners Guide On Replacing The Garage Doors In Brisbane
Business

Beginners Guide On Replacing The Garage Doors In Brisbane

November 30, 2020
  • Home
  • About Us
  • Authors
  • Submit News
  • Contact Us
  • Privacy Policy
  • Sitemap

The Hack Post © 2019

No Result
View All Result
  • Hacking News
    • Cyber Crime
  • Cyber Security
  • Technology
    • Internet
  • Entertainment
    • Gaming
  • Business
  • Science / Health

The Hack Post © 2019