Exploitation Summary
EIP tracks 3 public exploits for CVE-2026-1056. PoCs published by ch4r0nn, XZ1r0, Sechunt3r.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-1056, an unauthenticated arbitrary file deletion vulnerability in Snow Monkey Forms WordPress plugin (versions <= 12.0.3). The exploit leverages path traversal via the 'formid' parameter to delete arbitrary files on the server.
Description
The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' function in all versions up to, and including, 12.0.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
Exploits (3)
This repository contains a functional exploit for CVE-2026-1056, an unauthenticated arbitrary file deletion vulnerability in Snow Monkey Forms WordPress plugin (versions <= 12.0.3). The exploit leverages path traversal via the 'formid' parameter to delete arbitrary files on the server.
This repository contains a functional Python exploit for CVE-2026-1056, an unauthenticated arbitrary file deletion vulnerability in Snow Monkey Forms <= 12.0.3. The exploit bypasses CSRF checks and leverages path traversal via the 'formid' parameter to delete arbitrary files on the server.
This repository contains a functional exploit for CVE-2026-1056, an unauthenticated arbitrary file deletion vulnerability in Snow Monkey Forms for WordPress. The exploit leverages path traversal in the REST API endpoint to delete critical files, potentially leading to RCE.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H