CVE-2024-54363

This PoC exploits an Incorrect Privilege Assignment vulnerability in the Wp NssUser Register WordPress plugin, allowing unauthenticated users to register as administrators. The script checks the plugin version and sends a crafted POST request to escalate privileges.

The repository contains functional exploit code for CVE-2024-54363, targeting an arbitrary file upload vulnerability in the WordPress Plugin 3DPrint Lite 1.9.1.4. The exploit demonstrates the ability to upload a malicious file to a vulnerable target.

This PoC demonstrates an unauthenticated privilege escalation vulnerability in the Wp NssUser Register WordPress plugin (version <= 1.0.0). The exploit sends a crafted POST request to register a new user with administrator privileges.