CVE-2012-4915

This exploit targets a file disclosure vulnerability in the WordPress Google Document Embedder plugin (CVE-2012-4915) to retrieve database credentials, modify admin passwords, and inject a PHP backdoor into a theme file for remote code execution.

This Metasploit module exploits an arbitrary file disclosure vulnerability in the WordPress Google Document Embedder plugin (CVE-2012-4915) to leak database credentials, modify admin passwords, and achieve remote code execution by injecting PHP payloads into theme files.