Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-9796 — POC (SQLi) -> CVE-2024-9796 | Kitploit
Tools/GitHubGitHub/yup-ivan/cve-2024-9796
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubyup-ivan/cve-2024-9796

CVE-2024-9796

POC (SQLi) -> CVE-2024-9796

View Repository
317 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-9796

POC (SQLi) -> CVE-2024-9796

Functional PoC for vulnerability CVE-2024-9796, which affects the WP Advanced Search (autocompletion) plugin in WordPress, allowing SQL injection through unsanitized GET parameters.

📌 Description

This vulnerability allows an attacker to inject arbitrary SQL queries via the t parameter of the autocomplete endpoint: /wp-content/plugins/wp-advanced-search/class.inc/autocompletion/autocompletion-PHP5.5.php

⚠️ For educational purposes and authorized environments only.

🧰 Requirements

  • Python 3
  • Vulnerable WordPress with the WP Advanced Search plugin
  • Vulnerable plugin without applied patches
  • Access to the autocomplete endpoint

🚀 Installation and usage

root@kitploit:~
git clone https://github.com/yup-Ivan/CVE-2024-9796.git
cd CVE-2024-9796
python3 CVE-2024-9796.py
Download Tool