CVE-2026-0740

This exploit demonstrates an unauthenticated PHP file upload vulnerability in Ninja Forms Uploads (CVE-2026-0740). It uploads a webshell by leveraging a nonce generation flaw and path traversal in the file upload mechanism.

This repository contains a functional exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms - File Upload plugin for WordPress. The exploit automates the process of obtaining a nonce, uploading a disguised PHP shell, and renaming it to achieve remote code execution.

This repository contains a multi-threaded Python scanner for CVE-2026-0740, a path traversal vulnerability in the Ninja Forms File Uploads plugin for WordPress. The script detects vulnerable instances by fuzzing directories (1-100) and verifying unauthorized file uploads via crafted AJAX requests with path traversal payloads.

This repository contains a functional exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in the Ninja Forms File Uploads WordPress plugin (<= 3.3.26). The exploit leverages path traversal and extension manipulation to upload malicious files (e.g., PHP webshells) and achieve remote code execution (RCE).

The repository contains only a markdown file with a vulnerability description and external links to other GitHub repositories or encrypted backups, but no actual exploit code or technical analysis. The README lacks depth and points to external sources without providing functional PoC code.

The repository contains a ZIP file with obfuscated and non-functional code fragments, alongside a README with no technical details about the vulnerability. The ZIP file appears to contain corrupted or intentionally obfuscated Python and PHP files, with no clear exploit logic or vulnerability explanation.

This repository contains a functional exploit for CVE-2026-0740, targeting a vulnerability in Ninja Forms (WordPress plugin). The exploit uploads a malicious PHP shell by abusing the file upload functionality via admin-ajax.php, leveraging a nonce retrieval mechanism.

This is a functional exploit for CVE-2026-0740 targeting Ninja Forms Upload, leveraging path traversal to upload arbitrary files and achieve remote code execution. The script automates nonce retrieval, file upload with traversal, and validation of the uploaded file.

The repository contains only a README.md file with minimal content (just the CVE identifier) and no exploit code or technical details. It appears to be a placeholder or stub.

This repository contains a functional Python script that exploits a file upload vulnerability in the WordPress Ninja Forms plugin (CVE-2026-0740). The script automates the process of retrieving a nonce and uploading a malicious PHP shell to vulnerable targets listed in a file.

This repository contains a functional Python exploit for CVE-2026-0740, targeting an unauthenticated arbitrary file upload vulnerability in Ninja Forms File Uploads <= 3.3.26. The exploit includes detailed logging, proxy support, and path traversal capabilities.

This repository contains a functional Python exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms File Uploads <= 3.3.26. The exploit leverages a path traversal technique to upload files to arbitrary locations on the target system.

This repository contains a functional exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms - File Upload plugin for WordPress. The exploit automates the process of fetching a nonce, uploading a disguised PHP shell, and renaming it to achieve remote code execution.