vulnerability-playground.php

<?php

/**
 *
 * @wordpress-plugin
 * Plugin Name:       Vulnerability Playground
 * Plugin URI:        https://patchstack.com
 * Description:       This plugin designed to contain vulnerable function or process to be used to exercise on hacking WordPress ecosystem.
 * Version:           1.0.0
 * Author:            Patchstack
 * Author URI:        https://patchstack.com
 * License:           GPL-2.0+
 * License URI:       http://www.gnu.org/licenses/gpl-2.0.txt
 * Text Domain:       vulnerability-playground
 * Domain Path:       /languages
 */

// If this file is called directly, abort.
if ( ! defined( 'WPINC' ) ) {
	die;
}

define( 'PLUGIN_NAME_PLUGIN_NAME', 'vulnerability-playground' );
define( 'PLUGIN_NAME_VERSION', '1.0.0' );
define( 'PLUGIN_NAME_URL', plugin_dir_url( __FILE__ ) );
define( 'PLUGIN_NAME_PATH', plugin_dir_path( __FILE__ ) );
define( 'PLUGIN_NAME_BASE_DIR', plugin_dir_path( __FILE__ ) );
define( 'PLUGIN_NAME_BASE_NAME', plugin_basename( __FILE__ ) );

function create_the_custom_table() {
    global $wpdb;
    $charset_collate = $wpdb->get_charset_collate();
	
    $table_name = $wpdb->prefix . 'custom_questions';

    $sql = "CREATE TABLE " . $table_name . " (
	question_id int(11) NOT NULL AUTO_INCREMENT,
	title tinytext NOT NULL,
	description tinytext,
	type tinytext,
    category tinytext,
	PRIMARY KEY  (question_id)
    ) $charset_collate;";
 
    require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
    dbDelta($sql);
}

register_activation_hook(__FILE__, 'create_the_custom_table');

$vuln_types = array("afd", "afr", "afu", "bac", "csrf", "lfi", "phpoi", "privesc", "rce", "sqli", "ssrf", "xss");

foreach($vuln_types as $vuln_type){
    include_once $vuln_type . "/init.php";
}


?>