CVE-2025-5961

The repository contains functional exploit code for CVE-2025-5961, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.

This is a functional exploit for CVE-2025-5961, targeting an arbitrary file upload vulnerability in the WPvivid Backup & Migration WordPress plugin. It authenticates as an administrator, extracts a nonce, and uploads a PHP web shell to achieve remote code execution.

This PoC demonstrates an authenticated arbitrary file upload vulnerability in the WPvivid Backup & Migration plugin (CVE-2025-5961), allowing administrators to upload a PHP web shell via the `wpvivid_upload_import_files` action. The exploit includes a functional web shell for remote command execution.