CVE-2024-7135

This PoC exploits an authenticated arbitrary file read vulnerability in the Tainacan WordPress plugin (CVE-2024-7135) via directory traversal and missing authorization checks. It logs in as a WordPress user and reads arbitrary files by abusing the 'get_file' function.

This PoC exploits CVE-2024-7135, an arbitrary file read vulnerability in the Tainacan WordPress plugin (≤0.21.7) due to missing capability checks and directory traversal. It authenticates as a WordPress user, extracts a nonce, and reads arbitrary files via a crafted API request.

The repository contains functional exploit code for CVE-2024-7135, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the exploit by uploading a shell file to a vulnerable endpoint.