wiseep/cve-2025-5287Wordpress likes and dislikes add-on - SQL Injection
Description:
It is an exploit code that works for multiple urls and multi thread for Unauth Sql Injection on Wp plugin with CVE-2025-5287
Example usage:
usage: CVE-2025-5287.py [-h] --file FILE [--fudge FUDGE] [--timeout TIMEOUT] [--threads THREADS] [--proxy PROXY]
Time-Based SQLi Checker (Clean, Threaded, Proxy-Support)
Optional arguments:
-h, --help show this help message and exit
--file FILE File with base URLs (e.g. http://example.com)
--fudge FUDGE Extra time allowance for delay detection
--timeout TIMEOUT Request timeout in seconds
--threads THREADS Number of concurrent threads
--proxy PROXY Proxy to use (e.g. 5.5.5.5:8080)
