New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSRF Blocking Plugin #4

Open

random-robbie opened this issue Feb 28, 2017 · 0 comments

random-robbie commented Feb 28, 2017 •

edited

Loading

HI Dude,

you will need to add _wpnonce= to the POST now for knoxss plugin to work.

CSRF exploit was patched on knoxss.me

before posting you will need to grab it from

input type="hidden" name="_wpnonce" value="tsadasasdasd"

if the plugin does a get request to knoxss/me/pro it will be able to pull the wpnonce from the site to be able to pass it

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment