CVE-2022-1565

This exploit leverages an arbitrary file upload vulnerability in WP All Import (CVE-2022-1565) to achieve RCE. It requires admin credentials to upload a malicious ZIP file containing a PHP payload, bypassing file type validation.

This repository contains a Python-based exploit for CVE-2022-1565, targeting an arbitrary file upload vulnerability in the WordPress WP All Import plugin (versions <= 3.6.7). The exploit allows authenticated attackers with admin privileges to upload malicious files, potentially leading to remote code execution (RCE).