CVE-2020-36842

The repository contains a functional Python exploit for CVE-2020-36842, targeting an arbitrary file upload vulnerability in the WPvivid WordPress plugin (versions up to 0.9.35). The exploit authenticates, uploads a malicious ZIP file, and achieves remote code execution by extracting the payload to a web-accessible directory.

This repository contains a functional Python exploit for CVE-2020-36842, an arbitrary file upload vulnerability in the WPvivid WordPress plugin (versions up to 0.9.35). The exploit automates version checking, authentication, file upload, and extraction to achieve remote code execution via a malicious ZIP file.