CVE-2024-10674

This repository contains a functional exploit for CVE-2024-10674, which allows authenticated users with Subscriber-level access to install and activate arbitrary plugins in the Th Shop Mania WordPress theme (versions <= 1.4.9). The exploit automates the process of checking vulnerability, authenticating, and installing/activating a specified plugin.

The repository contains functional exploit code for CVE-2024-10674, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the exploit by uploading a shell file to a vulnerable endpoint.