Exploit for CVE-2025-29009

githubexploit · 2025-11-04

Description

Unauthenticated arbitrary file upload in Medical Prescription Attachment Plugin for WooCommerce up to 1.2.3.

CVSS 10.0 for CVE-2025-29009

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

89%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

0.5%higher than 41.2% of all CVEs

Updated 2026-06-17

CVE Information

Exploit Details

Modified:2025-11-04 12:29

Last Seen:2025-11-04 12:32

Reporter:joshs-code

Written in:Python

Last commit:2025-11-04

Tags

CVE-2025-29009Medical Prescription AttachmentWooCommerce PluginArbitrary File UploadUnauthenticated Access

Other exploits for CVE-2025-29009

Exploit for CVE-2025-29009

2026-09-02 katranSefaGITHUB

CVE-2025-29009-POC

2026-09-01 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-05-21 InMyMine7GITHUB

Exploit for CVE-2025-29009

2026-04-18 NxploitedGITHUB

Exploit Code

README6 lines

## https://sploitus.com/exploit?id=916CC362-4D92-508B-B1C4-1477570284D4
# CVE-2025-29009-POC
Medical Prescription Attachment Plugin for WooCommerce &lt;= 1.2.3 - Unauthenticated Arbitrary File Upload. 

Watch demo here:
https://youtu.be/WvW2shDBIFs