Exploit for CVE-2026-6279

kitploit · 2026-08-25

Description

Vulnerability in tools component identified as CVE-2026-6279.

Entry point

Parameterrender_logics · request body

Path/wp-admin/admin-ajax.php?action=fusion_get_widget_markup

Unauthenticated RCE via base64-decoded JSON passed to call_user_func() through the fusion_get_widget_markup AJAX endpoint.

CVSS 9.8 for CVE-2026-6279

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

2.2%higher than 80.9% of all CVEs

Updated 2026-08-28

CVE Information

CVE-2026-6279

Exploit Details

Modified:2026-08-25 04:14

Last Seen:2026-08-26 10:39

Reporter:KitPloit

Other exploits for CVE-2026-6279

CVE-2026-6279

2026-08-27 KitPloitKITPLOIT

CVE-2026-6279

2026-08-27 KitPloitKITPLOIT

CVE-2026-6279.py

2026-08-26 KitPloitKITPLOIT

Exploit for CVE-2026-6279

2026-06-13 87achrafg-stackGITHUB

Exploit for CVE-2026-6279

2026-06-13 87achrafg-stackGITHUB

Exploit for CVE-2026-6279

2026-05-23 zycoder0dayGITHUB

Exploit for CVE-2026-6279

2026-05-23 xxconiGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-87ACHRAFG-STACK-CVE-2026-6279
# CVE-2026-6279

Exploit Code

Share

Share on social media: