Exploitation Summary
EIP tracks 3 public exploits for CVE-2024-3673. PoCs published by iSee857, Nxploited, Boshe99. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains functional exploit code for CVE-2026-22812, demonstrating a command execution vulnerability in OpenCode. The script sends a crafted JSON payload to execute the 'id' command and checks for successful execution by verifying the presence of 'uid=' and 'gid=' in the response.
Description
The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.
Exploits (3)
The repository contains functional exploit code for CVE-2026-22812, demonstrating a command execution vulnerability in OpenCode. The script sends a crafted JSON payload to execute the 'id' command and checks for successful execution by verifying the presence of 'uid=' and 'gid=' in the response.
The repository contains a functional Python exploit for CVE-2024-3673, a Local File Inclusion (LFI) vulnerability in the Web Directory Free WordPress plugin (versions <= 1.7.2). The exploit automates version checking and file reading via a crafted POST request to the admin-ajax.php endpoint.
The repository contains functional exploit code for CVE-2024-3673, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The exploit demonstrates the ability to upload a malicious file to a vulnerable target.
Nuclei Templates (1)
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H