itsthalisman/cve-2026-3359-expA PoC/exploit written in python for the unauthenticated SQL injection vulnerability CVE-2026-3359 situated within Form Maker (version <= 1.15.42) by 10Web.
CVE-2026-3359 is an unauthenticated SQL Injection vulnerability situated within Web10's wordpress plugin "Form Maker" in all versions up to version 1.15.42.
In order to use this PoC/exploit, first set up a virtual enviroment through the commands "virtualenv {name of your enviroment here}" or "venv {name of your enviroment here}".
After that is done, install the required libraries for this code through the command "source /bin/activate" and then run "pip install -r requirements.txt" on your terminal
After setting up your virtual enviroment and all required libraries, you may start the PoC code by running "python3 cve-2026-3359.py -u http://example.com -poc"
Successful execution of this PoC will look like this:
