CVE-2021-24917

This repository contains a scanner for CVE-2021-24917, which checks for vulnerable endpoints by sending crafted requests and analyzing responses. It includes features like Telegram notifications and bulk URL scanning but does not include exploit code for achieving RCE or other offensive actions.

This exploit targets CVE-2021-24917, a vulnerability in the WPS Hide Login WordPress plugin. It detects the presence of the plugin and attempts to uncover the hidden login page by parsing the plugin's settings page.

This Metasploit module exploits an information disclosure vulnerability in WPS Hide Login <= 1.9 by sending a crafted GET request to '/wp-admin/options.php' with a referer header, revealing the hidden login path via a 302 redirect.