new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
Banned

Posts: 25
Threads: 0
Joined: Jun 2024
Reputation: 0

#221
12-23-2024, 08:42 PM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

thanksssssssssssssssss
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 14
Threads: 0
Joined: Dec 2024
Reputation: 0

#222
12-23-2024, 08:43 PM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

thank u for the information bro :3
Reply
Banned

Posts: 25
Threads: 0
Joined: Jun 2024
Reputation: 0

#223
12-23-2024, 08:46 PM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

thankssssssssssssssssssssssssssssssssss
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 12
Threads: 0
Joined: Dec 2024
Reputation: 0

#224
12-23-2024, 09:22 PM
thanks for info
Reply
Banned

Posts: 19
Threads: 1
Joined: Dec 2024
Reputation: 0

#225
12-26-2024, 03:34 AM
it's really work or not interested title
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 10
Threads: 0
Joined: Dec 2024
Reputation: 0

#226
12-26-2024, 04:06 AM
Nice. Thank you so much
Reply
Banned

Posts: 23
Threads: 0
Joined: Nov 2024
Reputation: 0

#227
12-27-2024, 03:42 AM
Nice info. Check it.
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 3
Threads: 0
Joined: Dec 2024
Reputation: 0

#228
12-27-2024, 02:22 PM
thank you so much bro
Reply
RaidForums
Member
Posts: 22
Threads: 0
Joined: Dec 2024
Reputation: 0

#229
12-28-2024, 12:06 AM
Thanks bro, hopefully works good
Reply
RaidForums
Member
Posts: 21
Threads: 3
Joined: Oct 2024
Reputation: 0

#230
01-01-2025, 07:05 AM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

Thank you for this
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,228 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,098 02-08-2026, 07:58 AM
Last Post: zeroday99
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 79 02-07-2026, 03:32 PM
Last Post: cysc
  POC CVE-2025-24071 caca28sapo1 15 810 02-07-2026, 08:53 AM
Last Post: hacker0123
  WordPress LFI to RCE - CVE-2025-0366 Serious 1 463 02-05-2026, 09:53 AM
Last Post: Sammm89



 Users browsing this thread: 1 Guest(s)