CVE-2024-49328

The repository contains a functional proof-of-concept for CVE-2024-49328, demonstrating an unauthenticated privilege escalation vulnerability in the WP REST API FNS plugin for WordPress. The PoC includes a crafted HTTP POST request to register a user with administrator privileges.

The repository contains functional exploit code for CVE-2024-49328, targeting an arbitrary file upload vulnerability in the WordPress Plugin 3DPrint Lite 1.9.1.4. The exploit script demonstrates the ability to upload a malicious file to a vulnerable target.

This repository contains a functional exploit for CVE-2024-49328, a privilege escalation vulnerability in the WP REST API FNS Plugin for WordPress (versions ≤ 1.0.0). The exploit registers a new admin user by sending a crafted POST request to the vulnerable API endpoint.