## https://sploitus.com/exploit?id=669C98A8-41A4-5114-9095-77491FB3934B
CVE-2026-3359 is an unauthenticated SQL Injection vulnerability situated within Web10's wordpress plugin "Form Maker" in all versions up to version 1.15.42.
In order to use this PoC/exploit, first set up a virtual enviroment through the commands "virtualenv {name of your enviroment here}" or "venv {name of your enviroment here}".
After that is done, install the required libraries for this code through the command "source /bin/activate" and then run "pip install -r requirements.txt" on your terminal
After setting up your virtual enviroment and all required libraries, you may start the PoC code by running "python3 cve-2026-3359.py -u http://example.com -poc"
Successful execution of this PoC will look like this:
<img width="1364" height="272" alt="poc" src="https://github.com/user-attachments/assets/75307863-43b8-4ba4-a30d-add4e72d897d" />