This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution (RCE) due to improper input validation in the load_content_via_ajax function.
This tool is provided for educational purposes and authorized penetration testing only. Use of this tool against systems without explicit permission is illegal and unethical. By downloading or using this tool, you agree to use it in a responsible and ethical manner.
No installation is necessary beyond having Python 3 and the requests library installed on your system. You can install the required Python library using the following command:
pip install requests
The script can be run from the command line by providing the target URL and the command you wish to execute on the vulnerable WordPress site. For example:
python CVE-2023-6634.py http://example.com "whoami"
Replace http://example.com with the URL of the target WordPress site and "whoami" with the command you wish to execute.
- Dynamic payload construction for exploiting CVE-2023-6634.
- Command-line arguments for easy use and integration into automated workflows.
- Detailed response output for assessing exploit success.
Contributions to improve the script or extend its functionality are welcome. Please ensure that any pull requests or issues adhere to ethical guidelines and do not promote unauthorized use.
- https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/learnpress/learnpress-4257-command-injection
- https://wpscan.com/vulnerability/909580f4-1306-4e61-ac7d-e7a2eb0961f8/
- https://nvd.nist.gov/vuln/detail/CVE-2023-6634
- Authors of the exploit: iamnoooob, rootxharsh, pdresearch
- Vulnerability researchers and the cybersecurity community for providing the insights necessary to develop this script.