Skip to content

Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' task in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server

Notifications You must be signed in to change notification settings

Yuri08loveElaina/CVE_2025_6065

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 

Repository files navigation

  • 🧪 Cách sử dụng cơ bản: python3 Exploit.py --url https://target.com --cmd wp-config.php
  • 🔍 Chế độ kiểm tra plugin: python3 Exploit.py --url https://target.com --check-only
  • 📂 Chế độ batch scan: python3 Exploit.py --file targets.txt --cmd wp-config.php
  • targets.txt ví dụ:
  • 🕵️‍♂️ Chế độ stealth + Proxy: python3 Exploit.py --url https://target.com --cmd .htaccess --stealth --proxy http://127.0.0.1:8080
  • 🧾 Xuất kết quả ra JSON: python3 Exploit.py --file targets.txt --cmd wp-config.php --json-output result.json

About

Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' task in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages