new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
#1
This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Hidden Content
You must register or login to view this content.

exploit:
Hidden Content
You must register or login to view this content.

Enjoy
Reply
#2
thank you so much
Reply
#3
Nice info. Check it.
Reply
#4
thanks for info
Reply
#5
wow i love this kind of exploits
Reply
#6
thanks for info
Reply
#7
wow i love this kind of exploits I will try, master. I hope you are always healthy
Reply
#8
thank you very much sir..!
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you feel this is incorrect.
Reply
#9
Nice info. Check it.
Reply
#10
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

ok thank you brother
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  New Zer0 Day Wordpress A3g00n 62 2,063 Yesterday, 04:37 PM
Last Post: asdf12fgd
  [WordPress] Contact Form - SQL Injection Vuln Friday 147 18,153 08-04-2025, 04:20 AM
Last Post: 1blackman
  New Zer0 Day Wordpress A3g00n 81 2,493 04-12-2025, 12:05 AM
Last Post: kursedpatriot
  Wordpress Elementor 3.11.6 Exploit - Full Takeover TheGoodlife 95 18,588 04-07-2025, 01:43 PM
Last Post: Escbodrum
  CVE-2024-5630 WordPress RCE via zip bypass upload HA_twck 60 5,924 03-19-2025, 10:39 AM
Last Post: bbq9527

Forum Jump:


 Users browsing this thread: 1 Guest(s)