[tayzan]

This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

Thankkkk yoouuu SO Much

---

Thankkkk youuuu !!!

[luau]

good shit yo ima try this out

[CarrotLeg]

thanks for info, I'm going to try it

[bolatotovip2]

tanks for sharing bro

[BigHuman]

thank you so much

[91IamYourGramda4]

thanks for sharing going to watch it.

[DarkSolo]

Does this exploit still work?

[bwbigballs]

Interesting find can't wait to see it

[itsBlackNight]

This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

lets see this one
~~ Quick edit

So i tried this , unfortunately this begs to be authorized in most of modern wordpress sites in order to acces this /wp-json or the full /wp-json/post-smtp/v1/connect-app in which the whole vulnerability is revolving on

[ByLorex]

This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

it is surprising that there is such a vulnerability in a software such as WordPress.