WordPress PrivEsc

Exploit

How to Escalate Privileges

Login as a normal user

Go to Profile

Update Profile

Intercept with BURP

Add the following to the REQUEST

&ure_other_roles=administrator&

Example below:

Results

Last updated