""ET EXPLOIT Possible WordPress Plugin BBPress 2.5 - Unauthenticated Priv Esc Attempt (CVE-2020-13693)""

SID: 2030239

Revision: 2

Class Type: attempted-admin

Metadata: affected_product Wordpress_Plugins, attack_target Web_Server, created_at 2020_06_02, cve CVE_2020_13693, deployment Perimeter, performance_impact Low, signature_severity Major, updated_at 2020_06_02

Reference:

  • cve

  • 2020-13693

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HTTP_SERVERS

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

  • Value: "POST"

  • Value: "user_login"

  • Value: "user_pass"

  • Value: "|22|bbp_keymaster|22|"

Within:

PCRE:

Special Options:

  • http_method

  • http_client_body

  • http_client_body

  • http_client_body

  • fast_pattern

source