+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: (help) exploit WordPress 4.7.0/4.7.1 Plugin Insert PHP - PHP (/showthread.php?tid=5555368)
(help) exploit WordPress 4.7.0/4.7.1 Plugin Insert PHP - PHP - MR-XX - Feb 19, 2017
Does Anyone know how to exploit WordPress 4.7.0/4.7.1 Plugin Insert PHP - PHP Code Injection ?
more detail:
https : // www . exploit-db . com/exploits/41308/
https : // blog . sucuri . net/2017/02/rce-attempts-against-the-latest-wordpress-rest-api-vulnerability.html
* - Dutisto - Feb 19, 2017
The exploit db post explain how you can do it. But there must be a plugin which allows PHP in page in the first place.
If you plain to get a shell or something, I think you can just get a JS shell instead of a PHP shell (don't know where i saw that).