Exploit for CVE-2024-7627 — Bit File Manager (WordPress) Unauthenticated RCE Exploit

📌 Description

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-7627, a critical Unauthenticated Remote Code Execution (RCE) vulnerability in the Bit File Manager WordPress plugin (versions 6.0 – 6.5.5).

When the Guest User Read feature is enabled, the plugin exposes a race condition inside the checkSyntax function.
This function writes a temporary PHP file into /wp-content/uploads/ before validation, allowing attackers to request the file and execute arbitrary system commands.

• Vulnerability Type: Unauthenticated RCE
• Affected Versions: Bit File Manager 6.0 – 6.5.5
• Patched Version: 6.5.6
• CVSS Score: 9.8 (Critical)

---

⚡ Features

• Automatically extracts a valid AJAX nonce from the target.
• Retrieves a random writable file hash for exploitation.
• Performs race condition using async parallel requests.
• Provides an for executing commands.