new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
RaidForums
Member
Posts: 37
Threads: 7
Joined: Aug 2024
Reputation: 0

#151
09-18-2024, 01:59 PM
thank you so much
Reply
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#152
09-18-2024, 05:07 PM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy
ggggoooood
.....
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
Advanced User

Posts: 59
Threads: 4
Joined: Sep 2024
Reputation: 1

#153
09-18-2024, 05:22 PM
Thanks for the share, let's see if this this works in the wild.
Reply
Advanced User

Posts: 45
Threads: 2
Joined: Oct 2023
Reputation: 0

#154
09-19-2024, 10:55 PM
Thanks so much for sharing this
Reply
RaidForums
Member
Posts: 3
Threads: 0
Joined: Sep 2024
Reputation: 0

#155
09-19-2024, 11:21 PM
Thank you,enjoy the video
Reply
Banned

Posts: 29
Threads: 0
Joined: Aug 2024
Reputation: 0

#156
09-19-2024, 11:52 PM
Wow that's classic shot man dmn
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 4
Threads: 0
Joined: Jun 2024
Reputation: 0

#157
09-20-2024, 05:29 AM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

thanks alot appreciate it
Reply
RaidForums
Member
Posts: 6
Threads: 0
Joined: Sep 2024
Reputation: 0

#158
09-20-2024, 06:05 AM
thank you so much
Reply
Banned

Posts: 39
Threads: 4
Joined: Sep 2024
Reputation: 0

#159
09-20-2024, 08:38 AM
Wow, its wonderfull. thanks dudeeeeeeeeee
Ban reason: Spamming | https://raidforums.as/Forum-Ban-Appeals if you feel this is incorrect. (Permanent)
Reply
Uber User

Posts: 426
Threads: 25
Joined: Jun 2023
Reputation: 53

#160
09-20-2024, 08:41 AM
Is this method working in 2024?
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,225 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,098 02-08-2026, 07:58 AM
Last Post: zeroday99
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 79 02-07-2026, 03:32 PM
Last Post: cysc
  POC CVE-2025-24071 caca28sapo1 15 810 02-07-2026, 08:53 AM
Last Post: hacker0123
  WordPress LFI to RCE - CVE-2025-0366 Serious 1 463 02-05-2026, 09:53 AM
Last Post: Sammm89



 Users browsing this thread: 1 Guest(s)