CVE-2013-2010

This Metasploit module exploits a PHP code injection vulnerability in WordPress W3 Total Cache (up to 0.9.2.8) by injecting malicious code via comment macros. It supports both authenticated and unauthenticated exploitation, with options for brute-forcing post IDs.

This is a Python-based exploit for CVE-2013-2010, targeting a Remote Code Execution (RCE) vulnerability in the W3 Total Cache WordPress plugin. The exploit sends a malicious payload via a crafted comment to execute arbitrary PHP code.

This Metasploit module exploits a PHP code injection vulnerability in WordPress W3 Total Cache (up to 0.9.2.8) via malicious comment injection using the 'mfunc' macro. It supports authenticated and unauthenticated exploitation, with options for brute-forcing post IDs.