CVE-2024-10958 PoC — WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay

Source

https://github.com/reinh3rz/CVE-2024-10958-WPPA-Exploit

Associated Vulnerability

Title: WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay (CVE-2024-10958)
Description:The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Readme

# WordPress WP Photo Album Plus Arbitrary Shortcode Execution

## CVE-2024-10958

WordPress WP Photo Album Plus eklentisinde bulunan kimlik doğrulaması olmayan arbitrary shortcode execution zafiyeti için PoC kodu.

### Detaylar

- **Etkilenen Sürümler:** <= 8.8.08.007
- **CVSS Skoru:** 7.3 (Yüksek)
- **Zafiyet Türü:** Arbitrary Shortcode Execution

### Zafiyet Açıklaması

WP Photo Album Plus eklentisi, `getshortcodedrenderedfenodelay` AJAX action'ında bulunan bir doğrulama eksikliği nedeniyle, kimlik doğrulaması olmayan kullanıcıların keyfi shortcode çalıştırmasına izin veriyor.

### Kaynaklar

- [Wordfence Threat Intel](https://www.wordfence.com/threat-intel/vulnerabilities/id/53bb0871-343a-4299-9902-682c422152d1)
- [WordPress Plugin Repository](https://wordpress.org/plugins/wp-photo-album-plus/)
- [Plugin Trac](https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/8.8.08.004/wppa-ajax.php#L1238)
- [Fix Commit](https://plugins.trac.wordpress.org/changeset/3184852/)

### Kurulum

git clone https://github.com/reinh3rz/CVE-2024-10958-WPPA-Exploit.git

cd CVE-2024-10958-WPPA-Exploit

pip install -r requirements.txt


### Kullanım

python3 exploit.py -u http://hedef-site.com


### Yasal Uyarı

Bu araç sadece eğitim ve araştırma amaçlıdır. Yalnızca izin verilen sistemlerde kullanılmalıdır. İzinsiz kullanımından doğacak sorumluluk kullanıcıya aittir.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →