Description
This module exploits an arbitrary file disclosure flaw in the WordPress blogging software plugin known as Google Document Embedder. The vulnerability allows for database credential disclosure via the /libs/pdf.php script. The Google Document Embedder plug-in versions 2.4.6 and below are vulnerable. This exploit only works when the MySQL server is exposed on an accessible IP and WordPress has filesystem write access.
Please note: The admin password may get changed if the exploit does not run to the end.
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/unix/webapp/wp/google_document_embedder_execmsf undefined(google_document_embedder_exec) > show actions ...actions...msf undefined(google_document_embedder_exec) > set ACTION < action-name >msf undefined(google_document_embedder_exec) > show options ...show and set options...msf undefined(google_document_embedder_exec) > runPrioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub