Temporary Advertisements:
Ad
Ad
Ad
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
#31
[quote="zinzeur" pid='352841' dateline='1705249732']
Esta é uma vulnerabilidade totalmente nova (lançada há cerca de 3 dias) que afeta sites wordpress (qualquer versão) com a versão instalada do plugin post smtp <= 2.8.7 (a mais recente é 2.8.9). Ele permite o controle completo do administrador, redefinindo a senha e recuperando e-mails enviados da API de log smtp. Aproveitar !!
ps: O vídeo é meu
vídeo :
Aproveitar
[/citar]
thanks for post brother

[url=https://breachforums.cx/private.php?action=send&uid=13584][/url]


This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Document sales are not permitted on this forum.
Reply
#32
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

tks rlly much lol.
Reply
#33
Thankyou very much for the share. Will see if it works.
Reply
#34
thanks for vuln
Reply
#35
thanks, check it out
Reply
#36
Thanks for sharing
Reply
#37
does it works still or not
Reply
#38
thank you so much
Reply
#39
Lets see this, sounds interesting
Reply
#40
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

thank you so much

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Replying With Hidden Content
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Buying one of the the exploit chains for MS Exchange (proxylogon or proxyshell) nightingal33 0 179 Yesterday, 09:26 AM
Last Post: nightingal33
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 51 7,194 Yesterday, 07:12 AM
Last Post: ruroot
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 82 8,223 Sep 22, 2026, 03:12 PM
Last Post: kaliaur0274
  {SECRET} DATABASE OF EXPLOITS lulagain 470 38,678 Sep 22, 2026, 02:50 PM
Last Post: kaliaur0274
  0day-RCE-Apache OFBiz avix 0 1,916 Sep 11, 2026, 04:02 AM
Last Post: avix

Forum Jump:


 Users browsing this forum: pingp0ng, 1 Guest(s)