Temporary Advertisements:
Ad
Ad
Ad
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
Worth learning bro
Reply
gggggggggggggggggg
Reply
Thanks por sharing!!
Reply
wow i love this kind of exploits
Reply
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

ok lets see what we have here

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Advertising telegram in configs
Reply
So it only works with smtp only installed?
Reply
thanks for sharing with us .
Reply
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy
thank you so much bro

(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy
thank you so much bro
Reply
Interesting, let me see that !

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
thank you gonna check it now
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Buying one of the the exploit chains for MS Exchange (proxylogon or proxyshell) nightingal33 0 222 Yesterday, 09:26 AM
Last Post: nightingal33
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 51 7,220 Yesterday, 07:12 AM
Last Post: ruroot
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 82 8,249 Sep 22, 2026, 03:12 PM
Last Post: kaliaur0274
  {SECRET} DATABASE OF EXPLOITS lulagain 470 38,743 Sep 22, 2026, 02:50 PM
Last Post: kaliaur0274
  0day-RCE-Apache OFBiz avix 0 1,951 Sep 11, 2026, 04:02 AM
Last Post: avix

Forum Jump:


 Users browsing this forum: 1 Guest(s)