Lucene search
+L

1 matches found

Packet Storm
Packet Storm
added 2026/03/02 12:0 a.m.206 views

📄 WordPress MPMF Plugin 1.0.2 Shell Upload

This Metasploit module exploits an unauthenticated file upload vulnerability in WordPress Multi‑Purpose Multi‑Form MPMF plugin version 1.0.2. By abusing a vulnerable AJAX action exposed via admin-ajax.php, an attacker can upload a crafted PHP file and trigger its execution to obtain remote code...

10CVSS6.5AI score0.00606EPSS
SaveExploits2
Rows per page
Query Builder