Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-11973. PoCs published by jFriedli.
AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2025-11973, demonstrating a local file inclusion (LFI) vulnerability that allows reading `/etc/passwd` via a `file://` URL and exfiltrating the data to a WordPress uploads directory. The exploit uses crafted HTTP POST requests to trigger the vulnerability and retrieve the exfiltrated file.
Description
The 简数采集器 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.6.3 via the __kds_flag functionality that imports featured images. This makes it possible for authenticated attackers, with Adminstrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Exploits (1)
This repository contains a functional exploit PoC for CVE-2025-11973, demonstrating a local file inclusion (LFI) vulnerability that allows reading `/etc/passwd` via a `file://` URL and exfiltrating the data to a WordPress uploads directory. The exploit uses crafted HTTP POST requests to trigger the vulnerability and retrieve the exfiltrated file.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N