|
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
|
|
10-12-2024, 07:24 AM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! Thanks you for this
10-12-2024, 08:06 PM
thank you bro, will try this if it work im willing to buy private exploit from you
10-12-2024, 08:39 PM
will check. thank you. good.
10-15-2024, 01:33 PM
lets check this out
10-20-2024, 05:07 AM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! scsssssssssssssssssssssssss
10-20-2024, 04:47 PM
Great Job!! Thanks very much
10-20-2024, 05:00 PM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!Thank you for posting!
10-20-2024, 05:04 PM
Nice info. Check it.
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
10-21-2024, 05:07 AM
Cool, nice findings.. thanks for sharing
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
10-23-2024, 01:32 PM
i was looking for new wp exploits i wonder if this still works
|
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| [POC] Google OAuth "MultiLogin" endpoint 0-day | 106 | 13,228 |
02-10-2026, 03:34 PM Last Post: |
||
| Cool Remote Patching ETW/Amsi PoC | 6 | 2,098 |
02-08-2026, 07:58 AM Last Post: |
||
| CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC | 3 | 79 |
02-07-2026, 03:32 PM Last Post: |
||
| POC CVE-2025-24071 | 15 | 810 |
02-07-2026, 08:53 AM Last Post: |
||
| WordPress LFI to RCE - CVE-2025-0366 | 1 | 463 |
02-05-2026, 09:53 AM Last Post: |
||
