WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload

Date

• 20-06-2016

Requirements

Python3

• Colorama

How to install requierd modules.

pip install -r requirements.txt

Tested on

• Windows 7/8
• Kali linux 2.0

Installation

You can download wordpress gravity form plugin exploit by cloning the GitHub repository.

git clone https://github.com/r0oth3x49/wp-gravity-form-exploit.git

Usage

Usage: wp-gravity.py [-h] [-u "target"] [-t "targets.txt"][-v]

Options:
  -h, --help   show this help message and exit
  -v, --vuln   Only identify if target is vulnerable.
  -u TARGET    Target url to check (e.g:- http://abc.com)
  -t FILENAME  File containg list of targets (e.g:- <filename>.txt)
  Example:
    wp-gravity.py -u http://www.test.com<br />
    wp-gravity.py -t [filename].txt