Wordpress: CVE-2021-29447

Vulnerability allow a authenticated user whith low privilages upload a malicious WAV file that could lead to remote arbitrary file disclosure and server-side re

Wordpress: CVE-2021-29447

$ tldr TryHackMe · Challenge · Easy

·	·
Platform	TryHackMe
Type	Challenge
Difficulty	EASY
Access	🟢 Free
Average time	45 min
Users	14.443
Official room	Open

Description

Vulnerability allow a authenticated user whith low privilages upload a malicious WAV file that could lead to remote arbitrary file disclosure and server-side request forgery (SSRF).

Solve the room

Language	Author	Format	Link
🇬🇧 EN	TryHackMe	Lab oficial	Open

Resources by skill

Skill	Source	Link
WordPress Exploitation	HackTricks	Open
Server-Side Request Forgery	HackTricks	Open
Cracking Hashes (hashcat / John)	HackTricks	Open

Related skills

WordPress Exploitation · Server-Side Request Forgery · Cracking Hashes (hashcat / John)

---

Comments & tips

Solved this room a different way? Share it here — comments live in GitHub Discussions.

Last updated: 2026-05-09