CVE-2025-34085

This is a functional exploit for CVE-2025-34085, targeting an unauthenticated RCE vulnerability in the WordPress Simple File List plugin. It uploads a disguised PHP payload, renames it via a vulnerable endpoint, and executes arbitrary commands.

This repository contains a functional exploit for CVE-2025-34085, targeting an unauthenticated RCE vulnerability in the WordPress Simple File List plugin via file upload and rename functionality. The PoC includes multithreading, auto-cleaning of target URLs, and payload execution.

This repository contains a fully functional Python exploit for CVE-2025-34085, targeting the WordPress Simple File List plugin (<= 4.2.3). The exploit chains unauthenticated file upload with a rename bypass to achieve remote code execution via a PHP shell.

This is a functional exploit for CVE-2025-34085 (duplicate of CVE-2020-36847), targeting an unauthenticated RCE vulnerability in WordPress Simple File List plugin versions ≤ 4.2.2 via file upload and rename bypass.

This is a functional exploit for CVE-2025-34085, targeting an unauthenticated file upload and rename vulnerability in the WordPress Simple File List plugin, leading to remote code execution (RCE). The script automates the upload of a malicious PHP file, renames it to an executable extension, and executes arbitrary commands.