CVE-2024-52402

This exploit targets a CSRF vulnerability in the WordPress Exclusive Content Password Protect plugin (versions <= 1.1.0) to upload a web shell, enabling remote code execution. It requires valid WordPress credentials to authenticate and upload a malicious PHP file.

The repository contains functional exploit code for CVE-2024-52402, targeting an arbitrary file upload vulnerability in the WordPress Plugin 3DPrint Lite 1.9.1.4. The exploit script demonstrates the ability to upload a malicious file to a vulnerable target.