Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-69080 — Exploit for unauthenticated Local File Inclusion (LFI) in WordPress Gecko theme <=1.9.8, allowing arbitrary file read including wp-config.php. Python script with requests dependency. | Kitploit
Tools/GitHubGitHub/andrielsec/cve-2025-69080
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubandrielsec/cve-2025-69080

CVE-2025-69080

Exploit for unauthenticated Local File Inclusion (LFI) in WordPress Gecko theme <=1.9.8, allowing arbitrary file read including wp-config.php. Python script with requests dependency.

View Repository
11 day agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Gecko Theme LFI Exploit (CVE-2025-69080)

Unauthenticated Local File Inclusion (LFI) vulnerability in WordPress Gecko Theme <= 1.9.8

CVSS

⚠️ Description

This exploit targets a high-severity (CVSS 8.1) Local File Inclusion vulnerability in the JanStudio Gecko WordPress theme. The vulnerability allows an unauthenticated attacker to read arbitrary files on the server, including sensitive configuration files like wp-config.php, which contain database credentials.

🔧 Requirements

  • Python 3.6+
  • requests library

🚀 Installation

root@kitploit:~
git clone https://github.com/AndrielSec/CVE-2025-69080.git
cd CVE-2025-69080
pip install -r requirements.txt
Download Tool