Exploit for CVE-2026-8832

githubexploit · 2026-05-28

Description

Exploit information for CVE-2026-8832.

ParametermethodCall/params/param/value/string · request body

Pathxmlrpc.php

XML-RPC wp.newPost used to create posts via RCE path in WPCode Lite when CPT lacks capability restrictions

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

48%confidence this exploit runs

Based on 1 file(s) in the source

1.9%higher than 77.0% of all CVEs

Updated 2026-07-25

Modified:2026-05-28 19:49

Last Seen:2026-05-28 20:05

Reporter:funixone

Last commit:2026-05-28

README3 lines

## https://sploitus.com/exploit?id=B6EDAD50-65E7-573E-B686-18BB242D32AB
# EXPLOIT-CVE-2026-8832-
EXPLOIT CVE-2026-8832