CVE-2026-0740

This exploit demonstrates an unauthenticated PHP file upload vulnerability in Ninja Forms Uploads (CVE-2026-0740). It uploads a webshell by leveraging a nonce generation flaw and path traversal in the file upload mechanism.

This repository contains a functional exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms - File Upload plugin for WordPress. The exploit automates the process of obtaining a nonce, uploading a disguised PHP shell, and renaming it to achieve remote code execution.

This repository contains a functional exploit for CVE-2026-0740, targeting a vulnerability in Ninja Forms (WordPress plugin). The exploit uploads a malicious PHP shell by abusing the file upload functionality via admin-ajax.php, leveraging a nonce retrieval mechanism.

This is a functional exploit for CVE-2026-0740 targeting Ninja Forms Upload, leveraging path traversal to upload arbitrary files and achieve remote code execution. The script automates nonce retrieval, file upload with traversal, and validation of the uploaded file.

The repository contains only a README.md file with minimal content (just the CVE identifier) and no exploit code or technical details. It appears to be a placeholder or stub.

This repository contains a functional Python script that exploits a file upload vulnerability in the WordPress Ninja Forms plugin (CVE-2026-0740). The script automates the process of retrieving a nonce and uploading a malicious PHP shell to vulnerable targets listed in a file.

This repository contains a functional Python exploit for CVE-2026-0740, targeting an unauthenticated arbitrary file upload vulnerability in Ninja Forms File Uploads <= 3.3.26. The exploit includes detailed logging, proxy support, and path traversal capabilities.

This repository contains a functional Python exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms File Uploads <= 3.3.26. The exploit leverages a path traversal technique to upload files to arbitrary locations on the target system.

This repository contains a functional exploit for CVE-2026-0740, an unauthenticated arbitrary file upload vulnerability in Ninja Forms - File Upload plugin for WordPress. The exploit automates the process of fetching a nonce, uploading a disguised PHP shell, and renaming it to achieve remote code execution.