CVE-2025-3776

This is a functional exploit for CVE-2025-3776, targeting a Remote Code Execution (RCE) vulnerability in the 'Verification SMS with TargetSMS' WordPress plugin <= 1.5. The exploit leverages an unsafe use of `call_user_func()` on user-controlled input, allowing unauthenticated attackers to execute arbitrary commands if a malicious function is pre-loaded into memory.

The repository contains functional exploit code for CVE-2025-3776, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the exploit by uploading a shell to a vulnerable endpoint.