CVE-2022-4047

This repository contains a bash script that automates the exploitation of CVE-2022-4047, an unauthenticated arbitrary file upload vulnerability in the Return Refund and Exchange For WooCommerce plugin. The script checks for vulnerable versions and uploads a malicious PHP file to exploit the vulnerability.

This repository contains a Python-based exploit for CVE-2022-4047, an unauthenticated arbitrary file upload vulnerability in the Return Refund and Exchange For WooCommerce plugin. The exploit automates version checking, nonce extraction, and file upload to achieve remote code execution via a malicious PHP file.