CVE-2026-54806

The CVE-2026-54806 PoC is a security tool designed to demonstrate the unauthenticated PHP Object Injection vulnerability in the WP Activity Log WordPress plugin, allowing attackers to inject serialized PHP objects through the User-Agent header. Key features include vulnerability checking, command execution, reverse shell initiation, and file writing capabilities, all without the need for authentication. This tool allows researchers to simulate attacks and explore the implications of the vulnerability in a controlled environment.