CVE-2025-7340

The repository contains a functional Python exploit for CVE-2025-7340, an unauthenticated arbitrary file upload vulnerability in the HT Contact Form Widget plugin for WordPress. The exploit automates the extraction of required parameters (nonce, form_id, AJAX endpoint) and uploads a PHP webshell to achieve remote code execution.

This repository contains a functional exploit for CVE-2025-7340, a file upload vulnerability in the WordPress HT Contact Form Widget plugin. The exploit automates the process of extracting necessary parameters (nonce, AJAX URL, form ID), uploading a PHP webshell, and providing an interactive shell.

The repository contains functional exploit code for CVE-2025-7340, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.