
CVE-2024-3673 Exploit: Local File Inclusion in Web Directory Free WordPress Plugin ( before 1.7.3 )
CVE-2024-3673 Exploit: Local File Inclusion in Web Directory Free WordPress Plugin ( before 1.7.3 )
CVE-2024-3673 describes a critical vulnerability in the Web Directory Free WordPress plugin (versions prior to 1.7.3). The plugin fails to validate a parameter before using it in an include() function, which leads to Local File Inclusion (LFI). This allows unauthenticated attackers to read sensitive files on the server.
An attacker can exploit this vulnerability by sending a crafted POST request to the admin-ajax.php endpoint, abusing the w2dc_controller_request action to include arbitrary files from the server.
The provided Python script automates the exploitation process, including:
readme.txt file./etc/passwd.requests librarypython3 CVE-2024-3673.py --url <TARGET_URL> [--file <TARGET_FILE>]
Example:
python3 CVE-2024-3673.py --url http://192.168.100.74/wordpress --file ../../../../../etc/passwd
--url, -u: The target WordPress site URL (required).--file, -f: The file to be read on the target server (default: /etc/passwd).This script is intended for educational purposes only. Unauthorized use of this exploit on systems you do not own or have explicit permission to test is illegal.