upvote

points

by grugq19 hours ago |
comments
upvoteby strictnein17 hours ago|
next
[-]
Are they only buying browser RCEs or are they also interested in RCEs deliverable via browser?

ex: Target hits website -> site delivers RCE for some software that is on the target's system

reply
upvoteby dcrazy17 hours ago|
prev|
next
[-]
Aren’t WP exploits valuable for watering hole attacks?
reply
upvoteby strictnein17 hours ago|
parent|
next
[-]
You don't need an RCE for that though. There's a lot of vulnerable plugins deployed everywhere.
reply
upvoteby dcrazy15 hours ago|
parent|
[-]
Ok, but an RCE in WP Core still seems pretty dang valuable, especially if you want to hit non-commercial websites that are less likely to have as many plugins installed?
reply
upvoteby illliillll16 hours ago|
parent|
prev|
[-]
You already owned the WordPress admin with your browser 0day, you don’t care if WordPress is secure or not.
reply
upvoteby mschuster9118 hours ago|
prev|
[-]
> There is very little interest in Wordpress

I'd disagree here. Still 41% of all sites use Wordpress [1]... and that means a lot of targets, and a lot of ways to target them. Your good ole' deface/ransomware extortion scheme, leaking data supposed to be confidential (such as account lists), trusted spreaders for exploits, or the latest hit, bets on "prediction markets" that have some Wordpress site set as oracle. People are willing to screw around with airport weather stations to manipulate bets [2], it's not that much of a stretch to assume such incentives would also apply for website hackers.

[1] https://www.wpzoom.com/blog/wordpress-statistics/

[2] https://edition.cnn.com/2026/04/23/europe/france-weather-sen...

reply
upvoteby strictnein17 hours ago|
parent|
[-]
Plenty of underground forums sell exploits for people to do stuff like that, but you're talking $200, not a theoretical $500k.

You also don't need an RCE for 99% of that.

reply