Exploit for CVE-2026-5718

githubexploit · 2026-05-08

Description

Exploit for CVE-2026-5718.

Entry point

Parameteraction · request body

Pathwp-admin/admin-ajax.php

Unauthenticated arbitrary file upload via CF7 DnD plugin using admin-ajax.php to trigger upload.

CVSS 8.1 for CVE-2026-5718

8.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 13 file(s) in the source

EPSS Score

4.2%higher than 89.6% of all CVEs

Updated 2026-06-24

CVE Information

CVE-2026-5718

Exploit Details

Modified:2026-05-08 16:54

Last Seen:2026-05-08 17:00

Reporter:kyukazamiqq

Written in:PHP

Last commit:2026-05-08

Other exploits for CVE-2026-5718

cve-2026-5718

2026-09-03 KitPloitKITPLOIT

CVE-2026-5718

2026-08-31 KitPloitKITPLOIT

CVE-2026-5718-PR-V-EXPLO-T

2026-08-31 KitPloitKITPLOIT

CVE-2026-5718-Lab

2026-08-29 KitPloitKITPLOIT

Exploit for CVE-2026-5718

2026-05-26 xxconiGITHUB

Exploit for CVE-2026-5718

2026-05-12 rootdirective-secGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=4D9D3221-5643-54EA-A2F7-05C1DD8FFCC6
No description provided

Exploit Code

Share

Share on social media: