|
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
|
|
Oct 12, 2024, 07:24 AM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! Thanks you for this
Oct 12, 2024, 08:06 PM
thank you bro, will try this if it work im willing to buy private exploit from you
Oct 12, 2024, 08:39 PM
will check. thank you. good.
Oct 15, 2024, 01:33 PM
lets check this out
Oct 20, 2024, 05:07 AM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! scsssssssssssssssssssssssss
Oct 20, 2024, 04:47 PM
Great Job!! Thanks very much
Oct 20, 2024, 05:00 PM
(Jan 14, 2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!Thank you for posting!
Oct 20, 2024, 05:04 PM
Nice info. Check it.
This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Oct 21, 2024, 05:07 AM
Cool, nice findings.. thanks for sharing
This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Oct 23, 2024, 01:32 PM
i was looking for new wp exploits i wonder if this still works
|
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| Buying one of the the exploit chains for MS Exchange (proxylogon or proxyshell) | 0 | 213 |
Yesterday, 09:26 AM Last Post: nightingal33 |
||
| Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 | 51 | 7,216 |
Yesterday, 07:12 AM Last Post: ruroot |
||
| Google Dorks for finding SQL injection vulnerabilities and other security issues | 82 | 8,247 |
Sep 22, 2026, 03:12 PM Last Post: kaliaur0274 |
||
| {SECRET} DATABASE OF EXPLOITS | 470 | 38,736 |
Sep 22, 2026, 02:50 PM Last Post: kaliaur0274 |
||
| 0day-RCE-Apache OFBiz | 0 | 1,946 |
Sep 11, 2026, 04:02 AM Last Post: avix |
||
