
Lab environment and proof-of-concept exploit for CVE-2026-1357, a WordPress plugin vulnerability, with Docker setup and automated exploitation scripts.
Lab Environment for CVE-2026-1357
sudo apt update && sudo apt install docker.io docker-compose -y
sudo systemctl start docker
git clone [Link of Repo]
wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip
unzip wpvivid-backuprestore.0.9.123.zip
sudo docker-compose up -d
On FireFox :
Site Title: Admin Cyber-Hub
Username: Admin
Password: anything
Email: [email protected]
Activate Plugins and Key From Wordpress
pip3 install requests pycryptodome --break-system-packages
nmap -sV -sC localhost
wpscan --url http://localhost --enumerate p --plugins-detection aggressive
python3 poc.py -u http://localhost -c "whoami"
python3 poc.py -u http://localhost -c "id"