[WordPress SMTP Plugin] CVE-2023-6875 + PoC
by who - Sunday January 14, 2024 at 05:40 PM
#11
Perfect thanks a lot my boy friend
Reply
#12
Thanks for sharing
Reply
#13
(01-14-2024, 05:40 PM)who Wrote: This vulnerability makes it possible for unauthenticated threat actors to reset the API key used to authenticate to the mailer and view logs, including password reset emails on WordPress sites that use this plugin. We also received another submission shortly after for an Unauthenticated Stored Cross-Site Scripting vulnerability in POST SMTP Mailer plugin from another researcher. This vulnerability enables threat actors to inject malicious web scripts into pages.

Blog:
https://www.wordfence.com/blog/2024/01/t...ss-plugin/

PoC:

thank you my broo
Reply
#14
Thanks for sharing
Reply
#15
I am very curious on what exactly this would be.
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you feel this is incorrect.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  New Zer0 Day Wordpress A3g00n 62 2,073 08-08-2025, 04:37 PM
Last Post: asdf12fgd
  new wordpress website takeover vuln (video + poc ) zinzeur 302 26,060 08-06-2025, 10:39 AM
Last Post: k4mui
  [WordPress] Contact Form - SQL Injection Vuln Friday 147 18,154 08-04-2025, 04:20 AM
Last Post: 1blackman
  New Zer0 Day Wordpress A3g00n 81 2,494 04-12-2025, 12:05 AM
Last Post: kursedpatriot
  University of lowa is Vulnerable to CVE-2023-49103 creek97 1 4,250 04-11-2025, 05:46 AM
Last Post: dghdj

Forum Jump:


 Users browsing this thread: 1 Guest(s)