WP File Manager CVE-2020-25213 Exploit

📁 Download Files

1. Main Exploit Script:

2. Documentation:

3. Requirements:

📋 Quick Start

1. Download all files above
2. Install dependencies:

   pip3 install -r requirements.txt

3. Run exploit:

   python3 exploit_wp_file_manager.py http://your-target.com

🎯 What This Exploit Does

• ✅ Checks for vulnerable WP File Manager 6.0
• ✅ Uploads PHP web shell via CVE-2020-25213
• ✅ Gains Remote Code Execution (RCE)
• ✅ Reads wp-config.php database credentials
• ✅ Creates WordPress admin user with full privileges
• ✅ Outputs shell URL + admin credentials

🔐 Vulnerability Details

• CVE: CVE-2020-25213
• Severity: CRITICAL (CVSS 9.8)
• Affected: WP File Manager 6.0
• Impact: Unauthenticated RCE → Admin Access
• Author: Spidy