On: Unpatched WordPress vulnerability allows code exec...

[joe_hills]

Some sites have plugins that allow users to create accounts with minimal permissions.

An attacker could create such an account, then abuse a legitimate nonce to delete files.

[jajern → joe_hills]

Not sure why someone would do this, but even without a plugin you can go to General Settings and set New User Default Role to Author. This would give any new accounts the ability to exploit this.

[claudiulodro → joe_hills]

Yeah, I didn't notice the video in the article with the proof-of-concept demonstrates this. Thanks.