CVE-2015-9331 POC

Vulnerability Description

CVE-2015-9331 is an arbitrary file upload vulnerability in the WordPress plugin WP All Import. This vulnerability allows an unauthenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution.

Affected Versions

• Plugin Name: WP All Import
• Affected Versions: <= 3.2.3
• Vulnerability Type: Arbitrary File Upload / Remote Code Execution
• CVE ID: CVE-2015-9331

File Description

• poc.py - Python exploitation script
• shell.php - PHP Webshell for demonstration

Usage

Requirements

pip install requests

Run POC

python poc.py

After running, enter the target URL as prompted (e.g., http://example.com). The script will automatically upload the shell and return the access URL.

How It Works

1. The script uploads a malicious PHP file via the /wp-admin/admin-ajax.php endpoint.
2. It calculates the upload directory path using a timestamp and MD5.
3. Returns the accessible Webshell URL.

Disclaimer

⚠️ Warning: This tool is intended for security research and authorized penetration testing only.

• Using this tool for unauthorized attacks is illegal.
• Users are responsible for their own actions.
• The author is not responsible for any misuse.
• Please ensure you have explicit written authorization before using it.

Remediation

• Upgrade the WP All Import plugin to the latest version.
• Implement strict file upload validation.
• Restrict access to admin-ajax.php.
• Use a Web Application Firewall (WAF).

References

• CVE-2015-9331 Details
• NVD Database

License

This project is provided for educational and research purposes only.

Note: Please use this tool responsibly and only test in authorized environments.