Temporary Advertisements:
Ad
Ad
Ad
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
Thanks, it’s cool to share that!
Reply
Thanks for sharing!
Reply
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

oh, thank you so much my website have this problem

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
thank you so much brotherr
Reply
thank you so much

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
nice info, I'll check it and test it
Reply
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

so very beautifull poc
Reply
is it still working guys?
Reply
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

Thank you so much!
Reply
its fixed or still vuln ?
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Buying one of the the exploit chains for MS Exchange (proxylogon or proxyshell) nightingal33 0 257 Yesterday, 09:26 AM
Last Post: nightingal33
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 51 7,233 Yesterday, 07:12 AM
Last Post: ruroot
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 82 8,272 Sep 22, 2026, 03:12 PM
Last Post: kaliaur0274
  {SECRET} DATABASE OF EXPLOITS lulagain 470 38,761 Sep 22, 2026, 02:50 PM
Last Post: kaliaur0274
  0day-RCE-Apache OFBiz avix 0 1,974 Sep 11, 2026, 04:02 AM
Last Post: avix

Forum Jump:


 Users browsing this forum: