Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Check-WP-CVE-2020-35489 — The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489 | Kitploit
Tools/GitHubGitHub/dn9uy3n/check-wp-cve-2020-35489
Vulnerability ScannersExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubdn9uy3n/check-wp-cve-2020-35489

Check-WP-CVE-2020-35489

The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489

View Repository
31162 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Check-WP-CVE-2020-35489

CVE-2020-35489

The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file types on a website.

An estimated 5 million websites were affected.

The PoC will be displayed on December 31, 2020, to give users the time to update.

Reference

https://wpscan.com/vulnerability/10508

https://contactform7.com/2020/12/17/contact-form-7-532/#more-38314

https://cwe.mitre.org/data/definitions/434.html

Run script

root@kitploit:~
$ python3 check_CVE-2020-35489.py -d domaintest.com

Contact Form 7 version: 5.1.3
domaintest.com is vulnerable!
root@kitploit:~
$ python3 check_CVE-2020-35489.py -i in.txt -o out.txt
Download Tool