CVE-2024-54262

This PoC demonstrates an authenticated arbitrary file upload vulnerability in the Import Export For WooCommerce plugin (v1.5), allowing Subscriber+ users to upload malicious PHP files via a multipart/form-data request to admin-ajax.php.

This is a functional exploit for CVE-2024-54262, targeting an arbitrary file upload vulnerability in the 'Import Export for WooCommerce' WordPress plugin (versions <= 1.5). It includes version detection, authentication, and file upload capabilities for remote code execution.

The repository contains functional exploit code for CVE-2024-54262, targeting an arbitrary file upload vulnerability in the WordPress Plugin 3DPrint Lite 1.9.1.4. The exploit demonstrates the ability to upload a malicious file to a vulnerable target.