CVE-2025-12057

This repository contains a functional Python exploit for CVE-2025-12057, targeting an unauthenticated arbitrary file upload vulnerability in the WordPress WavePlayer plugin (< 3.8.0). The exploit automates the process of uploading a malicious PHP payload to achieve remote code execution (RCE).

This repository contains a functional exploit for CVE-2025-12057, an unauthenticated arbitrary file upload vulnerability in the WordPress WavePlayer plugin (< 3.8.0). The exploit uploads a malicious PHP payload to achieve remote code execution (RCE).