CVE-2022-0165

This repository contains a Python-based scanner for detecting CVE-2022-0165, an open redirect vulnerability in the KingComposer WordPress plugin. The tool checks for vulnerable endpoints and supports Telegram notifications for detected vulnerabilities.

The exploit demonstrates an ID parameter validation bypass in the Page Builder KingComposer WordPress plugin, allowing unauthorized redirection via the kc_get_thumbn AJAX action. It crafts a malicious URL to exploit inadequate validation of the id parameter, potentially leading to phishing or malware distribution.