CVE-2023-3452

This PoC exploits a Remote File Inclusion (RFI) vulnerability in the WordPress Canto plugin (CVE-2023-3452) via the 'wp_abspath' parameter, allowing unauthenticated attackers to execute arbitrary code if 'allow_url_include' is enabled. The exploit automates the process by hosting a malicious 'admin.php' file and triggering its inclusion on the target server.

This repository contains a functional Metasploit module that exploits CVE-2023-3452 and CVE-2024-25096, which are remote file inclusion vulnerabilities in the WordPress Canto plugin. The exploit leverages unsanitized parameters (`abspath` and `wp_abspath`) to achieve remote code execution when `allow_url_include` is enabled in PHP.

This repository contains a functional Python exploit for CVE-2023-3452, targeting an RFI vulnerability in the WordPress Canto Plugin (≤ 3.0.4). The exploit includes a local HTTP server to serve a malicious PHP payload and supports both HTTP and HTTPS targets by disabling SSL verification.