This script demonstrates the exploitation of CVE-2024-5084, a vulnerability in the Hash Form plugin for WordPress, which allows unauthenticated arbitrary file upload leading to remote code execution.
- Name: CVE-2024-5084
- Description: Unauthenticated Arbitrary File Upload to Remote Code Execution.
- Affected Plugin: Hash Form – Drag & Drop Form Builder <= 1.1.0
- Source: Wordfence - Vulnerability Details