CVE-2022-4395

This exploit targets an arbitrary file upload vulnerability in the WordPress plugin 'Membership For WooCommerce' versions prior to 2.1.7. It uploads a malicious PHP file disguised as a GIF to achieve unauthenticated remote code execution.

This repository contains a Python script that automates the exploitation of CVE-2022-4395, an unauthenticated arbitrary file upload vulnerability in the WP Membership plugin for WordPress. The script uploads a PHP shell to vulnerable targets and verifies successful exploitation by checking for a specific string in the response.