WordPress 6.4.3, from the description of the room it tells us that this CMS is has 2 vulnerable plugins so let’s run wpscan to find these plugins. Now since we know what plugin it is let’s do some…

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

The post provides a detailed walkthrough on exploiting vulnerabilities in a WordPress site within the TryHackMe 'Smol' challenge. It highlights the importance of regular software updates and security patches, explores scanning tools like nmap and wpscan, and demonstrates the exploitation of two vulnerable plugins, including achieving Remote Code Execution (RCE) and escalating to root privileges to capture the required flags.

TryHackMe Smol Writeup