joshuaprovoste/0-click-rce-exploit-for-cve-2024-10924Unauthenticated authentication bypass to RCE exploit for CVE-2024-10924. Abuses an authentication and 2FA bypass in the Really Simple Security WordPress plugin to impersonate an admin user, upload a malicious plugin, and achieve remote command execution via an interactive shell.
This repository contains a proof-of-concept exploit for CVE-2024-10924, an authentication and 2FA bypass vulnerability in the Really Simple Security WordPress plugin that can be leveraged to achieve remote command execution (RCE).
The script abuses an authentication bypass to impersonate an administrator, retrieves the required nonce, uploads a malicious plugin, verifies the deployed payload, detects the target operating system, and provides an interactive remote shell.
python CVE-2024-10924.py --target http://target-wordpress-site --plugin-rce rce-plugin.zip
After execution, the script bypasses authentication, installs the malicious plugin, confirms payload accessibility, detects the OS, and drops into an interactive shell.