CVE-2024-10793

This repository contains a functional exploit for CVE-2024-10793, targeting a WordPress plugin vulnerability. The exploit leverages XSS to add privileged users, delete admins, and upload a shell, demonstrating full account takeover and remote code execution.

The repository contains a functional PoC for CVE-2024-10793, demonstrating a stored XSS vulnerability in the WP Security Audit Log plugin via the user_id parameter. The exploit script sends a malicious payload to the admin-ajax.php endpoint, while the YAML file detects the plugin's presence.