|
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
|
|
Mar 21, 2025, 03:49 AM
thanks for info
This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching. If you feel this is incorrect: /Forum-Ban-Appeals
Mar 24, 2025, 05:10 PM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! nice info bro thanks u so much
Mar 24, 2025, 05:30 PM
thanks for the info mate!
This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Document sales are not permitted
Mar 24, 2025, 05:35 PM
Great job thank you
Mar 24, 2025, 10:30 PM
Nice! Thanks for sharing!
Mar 25, 2025, 08:36 AM
Hope this is a surprise
This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Mar 29, 2025, 11:44 AM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! thank you for this friend This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect. (Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! I remember when my wordpress got pwned recently. My friend showed me how to do it, but it went by so quick. Hopefully this helps me to understand it (Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! I remember when my wordpress got pwned recently. My friend showed me how to do it, but it went by so quick. Hopefully this helps me to understand it
Apr 02, 2025, 05:44 PM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! thanks for sharing
Apr 02, 2025, 09:55 PM
thanks for info
|
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| Buying one of the the exploit chains for MS Exchange (proxylogon or proxyshell) | 0 | 371 |
Sep 26, 2026, 09:26 AM Last Post: nightingal33 |
||
| Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 | 51 | 7,310 |
Sep 26, 2026, 07:12 AM Last Post: ruroot |
||
| Google Dorks for finding SQL injection vulnerabilities and other security issues | 82 | 8,356 |
Sep 22, 2026, 03:12 PM Last Post: kaliaur0274 |
||
| {SECRET} DATABASE OF EXPLOITS | 470 | 38,858 |
Sep 22, 2026, 02:50 PM Last Post: kaliaur0274 |
||
| 0day-RCE-Apache OFBiz | 0 | 2,070 |
Sep 11, 2026, 04:02 AM Last Post: avix |
||
