 |
Before explaining the evaluation experiment, we will explain the Wordpress article tampering vulnerability.
The Wordpress article tampering vulnerability starts with an attacker using the Wordpress article ID endpoint to obtain a list of articles.
From the obtained article IDs, the attacker selects the articles to be tampered with and sends a query to conduct the tampering using the Wordpress article update endpoint.
For example, if the attacker wants to tamper with the post with ID 38, the attacker sends a request to /wp/v2/posts/38 with the parameters that have been changed to the value of the "id" and the content to be tampered with in the Title and other fields.
Here is an example of a query to change the title of a post with id 38 to "Title Changed".
The tampering of the article is completed when this request is processed successfully.
If we check the tampering using the endpoint that retrieves the list of articles used in the first step, we can see that the title of the article with ID 38 has been changed to "Title Changed", which was set at the time of tampering. |
IEEE/ICACT20220047 Slide.17
[Big Slide]