CVE-2025-34077
CRITICAL NUCLEIWordPress Pie Register <3.7.1.4 - Auth Bypass
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2025-34077.
PoCs published by Md Amanat Ullah (xSwads), Lotfi13-DZ, 0xgh057r3c0n, including Metasploit module exploits/unix/webapp/wp_pie_register_bypass_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages an authentication bypass in Pie Register WordPress Plugin (CVE-2025-34077) to upload a malicious plugin containing a PHP web shell, achieving remote code execution (RCE). The script automates the process for multiple targets using threading.
Description
An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.
Exploits (6)
This exploit leverages an authentication bypass in Pie Register WordPress Plugin (CVE-2025-34077) to upload a malicious plugin containing a PHP web shell, achieving remote code execution (RCE). The script automates the process for multiple targets using threading.
This exploit demonstrates an unauthenticated privilege escalation vulnerability in the WordPress Pie Register plugin (version <= 3.7.1.4). By sending a crafted POST request with specific parameters, an attacker can obtain authentication cookies for the admin user (ID 1).
This PoC exploits an unauthenticated admin session hijack vulnerability in the Pie Register WordPress plugin (≤ 3.7.1.4) by sending a crafted POST request to extract valid admin cookies.
This repository provides a detailed walkthrough of exploiting CVE-2025-34077 in the Pie Register WordPress plugin, including steps for authentication bypass, privilege escalation, and achieving a reverse shell. It includes screenshots and explanations of the process but lacks actual exploit code.
This PoC exploits an unauthenticated admin session hijack vulnerability in the WordPress Pie Register plugin (≤ 3.7.1.4) by sending a crafted POST request to steal admin session cookies.
This Metasploit module exploits an authentication bypass vulnerability in WordPress Plugin Pie Register <= 3.7.1.4 to generate a valid admin cookie, then uploads a malicious plugin containing a PHP payload for remote code execution.
Nuclei Templates (1)
References (6)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H