Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-6634 — CVE-2023-6634 | Kitploit
Tools/GitHubGitHub/krn966/cve-2023-6634
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubkrn966/cve-2023-6634

CVE-2023-6634

CVE-2023-6634

View Repository
422 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-6634 Exploit Script

Description

This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution (RCE) due to improper input validation in the load_content_via_ajax function.

Disclaimer

This tool is provided for educational purposes and authorized penetration testing only. Use of this tool against systems without explicit permission is illegal and unethical. By downloading or using this tool, you agree to use it in a responsible and ethical manner.

Installation

No installation is necessary beyond having Python 3 and the requests library installed on your system. You can install the required Python library using the following command:

root@kitploit:~
pip install requests

Usage

The script can be run from the command line by providing the target URL and the command you wish to execute on the vulnerable WordPress site. For example:

root@kitploit:~
python CVE-2023-6634.py http://example.com "whoami"

Replace http://example.com with the URL of the target WordPress site and "whoami" with the command you wish to execute.

Features

  • Dynamic payload construction for exploiting CVE-2023-6634.
  • Command-line arguments for easy use and integration into automated workflows.
  • Detailed response output for assessing exploit success.

Contributing

Contributions to improve the script or extend its functionality are welcome. Please ensure that any pull requests or issues adhere to ethical guidelines and do not promote unauthorized use.

License

MIT License

References

  • https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/learnpress/learnpress-4257-command-injection
  • https://wpscan.com/vulnerability/909580f4-1306-4e61-ac7d-e7a2eb0961f8/
  • https://nvd.nist.gov/vuln/detail/CVE-2023-6634

Acknowledgments

  • Authors of the exploit: iamnoooob, rootxharsh, pdresearch
  • Vulnerability researchers and the cybersecurity community for providing the insights necessary to develop this script.
Download Tool