CVE-2015-1376

This Python script exploits an authentication bypass and arbitrary file upload vulnerability in the WP Pixabay Images WordPress plugin (version 2.3). It allows an attacker to upload a malicious PHP file from a remote URL to a target WordPress site by leveraging path traversal and lack of host validation.

This Metasploit module exploits a vulnerability in the WordPress Pixabay Images plugin (2.3.6) by uploading malicious PHP code via an unchecked download URL. It leverages directory traversal to store and execute the payload.