( Wordpress Exploit ) Wordpress Multiple themes - Unauthenticated Arbitrary File Upload
# Wordpress Multiple themes - Unauthenticated Arbitrary File Upload
[CVE-2022-0316](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0316) Unauthenticated Arbitrary File Upload in multiple themes from ChimpStudio and PixFill.
For more exploits and exclusive ones contact me on telegram [@KtN1990](https://t.me/KtN1990).
## Themes Effected
- westand
- footysquare
- aidreform
- statfort
- club-theme
- kingclub-theme
- spikes
- spikes-black
- soundblast
- bolster
- rocky-theme
- bolster-theme
- theme-deejay
- snapture
- onelife
- churchlife
- soccer-theme
- faith-theme
- statfort-new
## Usage
To run this exploit you need to have python 3 and websites list then execute
```bash
python3 exploit.py -l list.txt -t 100
```
| Parameter | Type | Description |
| :-------- | :------- | :------------------------- |
| `-l` | `string` | **Required**. Your webistes list |
| `-t` | `int` | threads number ( 100 by default)|
## Contact
- [@KtN1990](https://t.me/KtN1990)
## More Exploits, Check Megatron!

- Provides an easy and efficient way to assess and exploit Wordpress security holes for mass purposes.
- 97+ Exploits, all types (RCE, LOOTS, AUTHBYPASS...).
- Customizable config.
- Monthly Free updates including more code opitmization, fixing bugs, adding more exploits plus 0days.
- Strong code base and custom threading and process model using a tasks management feature, getting reliable results is assured; no need to talk about speed since at KTN we use unconventional methods for concurrency.
- [Telegram Channel](https://t.me/megatron_ktn)
## Demo
[](https://www.youtube.com/watch?v=k6kRSlCIv4g)
## License
[MIT](https://choosealicense.com/licenses/mit/)
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view