Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2024-28890 PoC — WordPress plugin Forminator 安全漏洞

Source
Associated Vulnerability
Title:WordPress plugin Forminator 安全漏洞 (CVE-2024-28890)
Description:WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Forminator 1.29.0 之前版本存在安全漏洞,该漏洞源于允许远程攻击者通过访问服务器上的文件来获取敏感信息,更改使用该插件的站点,并导致拒绝服务。
Readme
# Exploit Script

This repository contains a Python script (`exp.py`) designed to check for vulnerabilities FORMINATOR RCE and execute a reverse shell on a given URL.

## Usage

## checker
```sh
python check.py
```
To use the script, run the following command:
```sh
python3 exp.py -u http://127.0.0.1:8000/?p=7
```
## check vuln or not
```sh
python3 exp.py -u http://127.0.0.1:8000/?p=7 -v
```

## reverse shell
```sh
python3 exp.py -u http://127.0.0.1:8000/?p=7 -r
```
File Snapshot

[4.0K] /data/pocs/9c9eb02ef92502d3877f342873327787193a59f9 ├── [2.2K] check.py ├── [ 11K] exp.py ├── [2.8K] fr.txt ├── [ 471] README.md └── [ 752] vuln.txt 0 directories, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.