new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
#61
Okay cool man thx!
Reply
#62
thanks for the thread...
Reply
#63
thanks brother for sharing
Ban reason: Ransomware sales/discussion/recruiting | https://raidforums.as/Forum-Ban-Appeals if you feel this is incorrect. (Permanent)
Reply
#64
Now that everybody and their mother uses shitpress this could be very useful.
Reply
#65
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

thanks for info mate
[url=https://raidforums.as/private.php?action=send&uid=50418][/url]
Reply
#66
Thanks for this information,
Reply
#67
Nice! thank you for the info!!!!
Reply
#68
Hot thread, thx for this
Reply
#69
thank u very much, sir !
Reply
#70
This will be an interesting thing to learn, thanks
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,225 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,098 02-08-2026, 07:58 AM
Last Post: zeroday99
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 79 02-07-2026, 03:32 PM
Last Post: cysc
  POC CVE-2025-24071 caca28sapo1 15 810 02-07-2026, 08:53 AM
Last Post: hacker0123
  WordPress LFI to RCE - CVE-2025-0366 Serious 1 463 02-05-2026, 09:53 AM
Last Post: Sammm89



 Users browsing this thread: 1 Guest(s)