Feb 03, 2025, 10:23 AM
Thanks, it’s cool to share that!
|
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
|
|
Feb 03, 2025, 10:23 AM
Thanks, it’s cool to share that!
Feb 03, 2025, 07:39 PM
Thanks for sharing!
Feb 03, 2025, 07:59 PM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! oh, thank you so much my website have this problem This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Feb 06, 2025, 12:49 AM
thank you so much brotherr
Feb 07, 2025, 08:09 AM
thank you so much
This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Feb 07, 2025, 08:33 AM
nice info, I'll check it and test it
Feb 07, 2025, 03:58 PM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! so very beautifull poc
Mar 20, 2025, 12:55 AM
is it still working guys?
Mar 20, 2025, 04:43 PM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! Thank you so much!
Mar 21, 2025, 03:33 AM
its fixed or still vuln ?
|
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| Buying one of the the exploit chains for MS Exchange (proxylogon or proxyshell) | 0 | 257 |
Yesterday, 09:26 AM Last Post: nightingal33 |
||
| Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 | 51 | 7,233 |
Yesterday, 07:12 AM Last Post: ruroot |
||
| Google Dorks for finding SQL injection vulnerabilities and other security issues | 82 | 8,272 |
Sep 22, 2026, 03:12 PM Last Post: kaliaur0274 |
||
| {SECRET} DATABASE OF EXPLOITS | 470 | 38,761 |
Sep 22, 2026, 02:50 PM Last Post: kaliaur0274 |
||
| 0day-RCE-Apache OFBiz | 0 | 1,974 |
Sep 11, 2026, 04:02 AM Last Post: avix |
||