Wordpress POP Chain gadget 2025

Event Name Sekai CTF 2025
GitHub URL sekaictf-2025/web/fancy-web at main · project-sekai-ctf/sekaictf-2025
Challenge Name Fancy Web

image.png

In wordpress route, if a params called like this $some_value = trim( strtolower( $request['somevalue'] ) ); it can be specified via get or post request data.

Event Name Patchstack Alliance CTF S02E01 - WordCamp Asia
GitHub URL -
Challenge Name Blocked

In wordpress get_option somehow ignore some non printable character like \x01 and \x00 even if it’s in the middle, it’s work with update_option too

Event Name Patchstack Alliance CTF S02E01 - WordCamp Asia
GitHub URL -
Challenge Name Blocked