Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-2539 | Kitploit
Tools/GitHubGitHub/d4rkh0rse/cve-2025-2539
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration TestingLearning & Education
GitHubd4rkh0rse/cve-2025-2539

CVE-2025-2539

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

POC - CVE-2025-2539 File Away <= 3.9.9.0.1

Medium GitHub

Overview

The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 3.9.9.0.1. This enables unauthenticated attackers, who exploit a reversible weak algorithm, to read the contents of arbitrary files on the server, which may contain sensitive information.

Read about it — CVE-2025-2539

Disclaimer: This Proof of Concept (POC) is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

Full POC

Getting Started

Cloning the Repository

First, clone the repository:

root@kitploit:~
git clone https://github.com/d4rkh0rse/CVE-2025-2539.git

Run the Exploit:

root@kitploit:~
python CVE_2025-2539.py <target_url> <File>
Download Tool