CVE-2026-1405

This is a functional exploit for CVE-2026-1405 targeting WordPress Slider-Future plugin. It uploads a remote shell via the vulnerable endpoint `/wp-json/slider-future/v1/upload-image/` and verifies its execution by checking for a signature in the response.

This repository contains a Python-based scanner for detecting CVE-2026-1405 in WordPress installations. It checks for indicators such as WordPress fingerprints, `/wp-json/` availability, and specific plugin markers to classify targets as likely or possibly vulnerable.

This repository contains a functional exploit for CVE-2026-1405, targeting a WordPress Slider-Future plugin vulnerability. The exploit uploads a shell via a vulnerable endpoint and verifies its execution, demonstrating remote code execution (RCE).