Exploitation Summary
EIP tracks 4 public exploits for CVE-2026-1306. PoCs published by XiaomingX, adminlove520, richardpaimu34. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository lacks actual exploit code and instead redirects to an external download link (tinyurl.com). The README contains vague marketing language ('detection evasion', 'proxy support') without technical details about the vulnerability.
Description
The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible granted the attacker can obtain a valid nonce. The nonce is exposed in frontend JavaScript making it trivially accessible to unauthenticated attackers.
Exploits (4)
The repository lacks actual exploit code and instead redirects to an external download link (tinyurl.com). The README contains vague marketing language ('detection evasion', 'proxy support') without technical details about the vulnerability.
This repository contains a functional Python exploit for CVE-2026-1306, targeting the midi-Synth WordPress plugin. The exploit leverages an improper file type validation in the 'export' AJAX action to upload a malicious PHP shell, which is left on the server due to a cleanup failure when the API key validation fails.
The repository lacks actual exploit code and instead redirects to an external download link (tinyurl.com). The README provides vague details about the exploit chain without technical depth, which is characteristic of social engineering lures.
This repository contains a functional Python exploit for CVE-2026-1306, targeting the midi-Synth WordPress plugin. The exploit automates the extraction of a nonce from pages containing the [midiSynth] shortcode and leverages an insecure file upload vulnerability in the 'export' AJAX action to upload a malicious PHP shell.
Nuclei Templates (1)
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H