CVE-2024-12849

The repository contains a functional proof-of-concept for CVE-2024-12849, demonstrating an unauthenticated arbitrary file read vulnerability in the Error Log Viewer By WP Guru WordPress plugin. The exploit leverages the `wp_ajax_nopriv_elvwp_log_download` AJAX action to read sensitive files like `/etc/passwd`.

This repository contains a functional exploit for CVE-2024-12849, which targets an arbitrary file read vulnerability in the Error Log Viewer By WP Guru WordPress plugin. The exploit checks the plugin version and performs unauthenticated file reads via the `wp_ajax_nopriv_elvwp_log_download` AJAX action.

The repository contains functional exploit code for CVE-2024-12849, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.