Unauthenticated 0-click RCE exploit for CVE-2024-50526. Exploits an arbitrary file upload vulnerability in a vulnerable WordPress form plugin to upload a PHP payload, verify its location, detect the target operating system, and achieve remote command execution via an interactive shell.
This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin, leading to remote command execution (RCE).
The script uploads a PHP payload through a vulnerable form endpoint without authentication. Once uploaded, it verifies the payload location, detects the target operating system, and provides an interactive remote shell for command execution.
python CVE-2024-50526.py --target http://target-wordpress-site/mpmf-1/ --form-name hkh
After execution, the script uploads the payload, confirms its accessibility, detects the OS, and drops into an interactive shell.