CVE-2024-12252

This repository contains a functional exploit for CVE-2024-12252, targeting the SEO LAT Auto Post WordPress plugin. The exploit leverages a missing capability check on the `remote_update` AJAX action to overwrite a plugin file, achieving remote code execution.

The repository contains a functional proof-of-concept exploit for CVE-2024-12252, demonstrating how an unauthenticated attacker can overwrite the `seo-beginner-auto-post.php` file in the SEO LAT Auto Post WordPress plugin (version <= 2.2.1) via a missing capability check on the `remote_update` AJAX action, leading to remote code execution.

The repository contains functional exploit code for CVE-2024-12252, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.