Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/yup-ivan/cve-2019-9978
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationPayload Development
GitHubyup-ivan/cve-2019-9978

CVE-2019-9978

POC (RCE) -> CVE-2019-9978

View Repository
437 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2019-9978 – Proof of Concept (PoC)

Functional PoC for vulnerability CVE-2019-9978, affecting the plugin
Social Warfare <= 3.5.2, allowing Remote Code Execution (RCE) in WordPress.

📌 Description

This exploit abuses the swp_debug=load_options parameter to force the loading of a remote payload, allowing command execution on the target server and obtaining a reverse shell.

⚠️ Exclusive use for educational purposes and authorized environments.

🧰 Requirements

  • Python 3
  • Vulnerable WordPress with Social Warfare <= 3.5.2
  • Active listener (e.g. nc)
  • File php-reverse-shell.php in the same directory as the script

🚀 Installation and usage

root@kitploit:~
git clone https://github.com/yup-Ivan/CVE-2019-9978.git
cd CVE-2019-9978
python3 CVE-2019-9978-POC.py
Download Tool