The module can be selected in the Metasploit console by using the following command:
use exploit/multi/http/wp_crop_rce
The following screenshot shows the output of the preceding command:
We set the required options as shown in the following screenshot. We will need a low privilege account on the WordPress blog, as this vulnerability requires authentication as well as the privilege of uploading and editing media:
The exploitation happens in several steps. The first step that the Metasploit module ...
