CVE-2023-6972

This repository contains a functional Python exploit for CVE-2023-6972, an unauthenticated arbitrary file deletion vulnerability in the WordPress Backup Migration plugin (<=1.3.9). The exploit automates both vulnerability checking and exploitation, allowing deletion of arbitrary files via a crafted request to the vulnerable endpoint.

This repository contains a functional Python exploit for CVE-2023-6972, an unauthenticated arbitrary file deletion vulnerability in the WordPress Backup Migration plugin (versions <= 1.3.9). The exploit automates both vulnerability checking and exploitation, allowing deletion of arbitrary files, which can be chained to achieve RCE by deleting critical files like wp-config.php.