CVE-2025-2011

This Python script exploits an SQL injection vulnerability in the WordPress Depicter Plugin (CVE-2025-2011) via the 's' parameter in admin-ajax.php. It includes functionality to check vulnerability status, extract admin user details, and execute custom SQL queries using error-based SQL injection techniques.

This repository contains a functional proof-of-concept for CVE-2025-2011, a SQL injection vulnerability in the Depicter Slider & Popup Builder WordPress plugin (versions < 3.6.2). The PoC includes a Docker-based test environment and a Python script to exploit the vulnerability via crafted AJAX requests.

This is a functional SQL injection exploit for the WordPress Depicter plugin, leveraging a union-based SQLi vulnerability in the admin-ajax.php endpoint. It automates database enumeration, table/column extraction, and data retrieval.

This is a functional PoC for CVE-2025-2011, an SQL injection vulnerability in the Slider & Popup Builder by Depicter WordPress plugin. It includes two payloads to extract bcrypt hashes from the wp_users table and optionally cracks them using Hashcat.

This Metasploit module exploits an unauthenticated SQL injection vulnerability in the WordPress Depicter plugin via the 's' parameter in admin-ajax.php. It retrieves user credentials by injecting a UNION-based SQL payload.