new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
nice share
Reply
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  {SECRET} DATABASE OF EXPLOITS lulagain 429 24,591 4 hours ago
Last Post: Yjuddur
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 66 2,893 4 hours ago
Last Post: Yjuddur
  Acunetix Premium Cracked v24 Full Activated A3g00n 22 1,312 Yesterday, 09:22 AM
Last Post: Usercomplex
  CVE-2024-32002 RCE PoC HA_twck 1 377 Apr 24, 2026, 05:13 AM
Last Post: p2wnz_bontensec
  GeoServer: Full Exploit + Mass Scanning Utility Loki 26 2,794 Apr 24, 2026, 04:56 AM
Last Post: p2wnz_bontensec

Forum Jump:


 Users browsing this forum: 1 Guest(s)