j4k0m/CVE-2021-24499

PoC

Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme.

view exploit source poc_in_githubauthor j4k0mpublished 2021-09-12catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-24499US	critical9.8	60.1% (99th)	Exploit	2021-08-09
The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.