CVE-2025-28915
CRITICALThemeEgg ToolKit <= 1.2.9 - Arbitrary File Upload
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-28915. PoCs published by Nxploited, Boshe99, Pei4AN.
AI-analyzed exploit summary This is a functional exploit for CVE-2025-28915, an arbitrary file upload vulnerability in the WordPress ThemeEgg ToolKit plugin (versions ≤ 1.2.9). It automates version checking, authentication, nonce extraction, and uploads a PHP web shell for remote code execution.
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to a Web Server.This issue affects ThemeEgg ToolKit: from n/a through <= 1.2.9.
Exploits (3)
This is a functional exploit for CVE-2025-28915, an arbitrary file upload vulnerability in the WordPress ThemeEgg ToolKit plugin (versions ≤ 1.2.9). It automates version checking, authentication, nonce extraction, and uploads a PHP web shell for remote code execution.
The repository contains functional exploit code for CVE-2025-28915, targeting an arbitrary file upload vulnerability in the WordPress Plugin 3DPrint Lite 1.9.1.4. The exploit demonstrates the ability to upload a malicious file to a vulnerable target.
This exploit targets a file upload vulnerability in WordPress ThemeEgg ToolKit (CVE-2025-28915), allowing authenticated users to upload a malicious PHP shell. The PoC logs in, extracts a security nonce, and uploads a shell via the vulnerable endpoint.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H