CVE-2022-4395 PoC — Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

Source

https://github.com/MrG3P5/CVE-2022-4395

Associated Vulnerability

Title:Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload (CVE-2022-4395)
Description:The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.

Description

Mass Auto Exploit CVE-2022-4395 Unauthenticated Arbitrary File Upload

Readme

<p align="center">
<img src="https://avatars.githubusercontent.com/u/57594747?s=400&u=da1eec8bf84a62a2ca11230d358dfac0bb000bcd&v=4" alt="png" width="128" height="128"/>
</p>
<p align="center">
<h1 align="center">MASS CVE-2022-4395</h1>
</p>
<p align="center">
<a href="https://github.com/MrG3P5"><img title="Author" src="https://img.shields.io/badge/Author-X MrG3P5-red.svg?style=for-the-badge&logo=github"></a>
</p>
<br>

## Usage

```sh
apt install python3 python3-pip -y
pip3 install -r require.txt
python3 main.py
```

## Preview
![index](https://raw.githubusercontent.com/MrG3P5/CVE-2022-4395/main/Screenshot_20230309-193334_ANDRAX_Hacker's_Platform~2.png)

## Reference
https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40

File Snapshot


 [4.0K]  /data/pocs/2d6ed915f6e58fec14d6e189c42ab326ecde91d9
├── [2.0K]  main.py
├── [ 746]  README.md
├── [  27]  require.txt
├── [   4]  result.txt
├── [ 88K]  Screenshot_20230309-193334_ANDRAX_Hacker's_Platform~2.png
└── [ 449]  x.php

0 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!