CVE-2026-0740

This repository contains a functional Python exploit for CVE-2026-0740, targeting an unauthenticated arbitrary file upload vulnerability in Ninja Forms File Uploads <= 3.3.26. The exploit includes detailed logging, proxy support, and path traversal capabilities.

This repository contains a functional Python exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms File Uploads <= 3.3.26. The exploit leverages a path traversal technique to upload files to arbitrary locations on the target system.

This repository contains a functional exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms - File Upload plugin for WordPress. The exploit automates the process of fetching a nonce, uploading a disguised PHP shell, and renaming it to achieve remote code execution.