Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-28915 — WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability | Kitploit
Tools/GitHubGitHub/nxploited/cve-2025-28915
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubnxploited/cve-2025-28915

CVE-2025-28915

WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-28915 - WordPress ThemeEgg ToolKit Arbitrary File Upload Exploit

📌 Description

An Unrestricted File Upload vulnerability in the ThemeEgg ToolKit plugin for WordPress (versions ≤ 1.2.9) allows authenticated attackers to upload web shells to the server. This can lead to remote code execution (RCE), complete website takeover, and compromise of sensitive data.

  • CVE ID: CVE-2025-28915
  • Severity: 🔴 Critical (CVSS: 9.1)
  • Affected Versions: ThemeEgg ToolKit ≤ 1.2.9
  • Attack Vector: Authenticated, requires WordPress user with sufficient privileges
  • Impact: Full server compromise, code execution, data exfiltration

🔥 Exploit Overview

This script automates the exploitation of CVE-2025-28915 by:

  1. Checking the plugin version to confirm vulnerability.
  2. Logging in to WordPress using provided credentials.
  3. Extracting security nonce required for authentication.
  4. Uploading a PHP Web Shell via the vulnerable endpoint.
  5. Providing the shell URL for post-exploitation.

🚀 Usage

Prerequisites:

  • Python 3.x
  • requests, beautifulsoup4

Installation:

root@kitploit:~
pip install requests beautifulsoup4

Command Example:

root@kitploit:~
python CVE-2025-28915.py -u http://192.168.100.74:888/wordpress -un admin -p password123

Arguments:

ArgumentDescription
-uTarget WordPress URL (e.g., http://target.com/wordpress)
-unWordPress username
-pWordPress password

🎯 Exploit Output Example

root@kitploit:~
[+] Vulnerable version detected: 1.2.9
[+] Logged in successfully.
[+] Found security nonce: f82467a997
[*] Uploading Web Shell...
[+] Web Shell uploaded successfully!
[+] Potential Web Shell location: http://target.com/wp-content/uploads/2025/03/shell.php
[*] Test command: http://target.com/wp-content/uploads/2025/03/shell.php?cmd=id

⚠️ Mitigation

  • Upgrade ThemeEgg ToolKit to a patched version (>1.2.9).
  • Restrict file uploads to allow only necessary file types.
  • Implement security plugins that block unauthorized file uploads.
  • Monitor logs for suspicious activity.

📜 Legal Disclaimer

This script is for educational and authorized security testing purposes only. Unauthorized use is illegal and unethical. The author assumes no liability for misuse.

By: Khaled Alenazi (Nxploit)

Download Tool