CVE-2024-9698

The repository contains functional exploit code for CVE-2024-9698, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the exploit by uploading a malicious file to a vulnerable endpoint.

This is a functional exploit for CVE-2024-9698, targeting an arbitrary file upload vulnerability in the Crafthemes Demo Import WordPress plugin (versions ≤ 3.3). It authenticates as an admin, extracts a nonce, and uploads a malicious PHP file to achieve remote code execution.