CVE-2014-4725

This Metasploit module exploits an unauthenticated file upload vulnerability in WordPress MailPoet (wysija-newsletters) plugin versions before 2.6.8. It bypasses access controls by leveraging PHP's $_REQUEST variable handling to upload a malicious ZIP file containing a PHP payload.

This repository contains a Python script to scan for and exploit CVE-2014-4725, a vulnerability in the MailPoet/Wysija Newsletters WordPress plugin. The exploit uploads a malicious ZIP file to vulnerable targets, achieving remote code execution.

This repository contains a functional exploit for CVE-2014-4725, targeting the MailPoet/Wysija Newsletters plugin in WordPress. The exploit includes both scanning and exploitation capabilities, allowing for the upload of a malicious ZIP payload to vulnerable targets.

This Metasploit module exploits an unauthenticated file upload vulnerability in the WordPress MailPoet Newsletters plugin (wysija-newsletters) before version 2.6.8. It bypasses access checks by leveraging PHP's $_REQUEST variable handling to upload a malicious ZIP file containing a PHP payload.