CVE-2024-6366

The repository contains functional exploit code for CVE-2024-6366, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.

This PoC demonstrates an unauthenticated media upload vulnerability in the User Profile Builder WordPress plugin before 3.11.8. It checks the plugin version and exploits the async upload functionality to upload a file without proper authorization.

This is a Metasploit module exploiting an unauthenticated file upload vulnerability in the WordPress User Profile Builder plugin before version 3.11.8, allowing remote code execution via malicious PHP payload upload.