$115.50 USD (by current exchange rate)
Total: 4 file(s)
Hidden text contain: 0 symbol(s)
Download file(s):
other.zip 17014.08KB
proof.mp4 3803KB
README.txt 1.45KB
requirements.txt 0.03KB
Info(Description by file owner):
CVE-2025-3054-Exploit
The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Please note that this requires the 'Private Message' module to be enabled and the Business version of the PRO software to be in use.
For inquiries, please contact:[email protected]
Enter valid email to buy this volume:
We will send download links to this email address after payment confirmation.
Please note that SatoshiDisk does not provide support for the items purchased through a seller via us. If you have questions regarding your product, please contact the seller directly. We can't refund, change, rollback or cancel the transaction because of blockchain protocol. All sales are final.