03-21-2025, 03:49 AM
thanks for info
|
new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
|
|
03-24-2025, 05:10 PM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! nice info bro thanks u so much
03-24-2025, 05:30 PM
thanks for the info mate!
Ban reason: Document sales are not permitted (Permanent)
03-24-2025, 05:35 PM
Great job thank you
03-24-2025, 10:30 PM
Nice! Thanks for sharing!
03-25-2025, 08:36 AM
Hope this is a surprise
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
03-29-2025, 11:44 AM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! thank you for this friend
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! I remember when my wordpress got pwned recently. My friend showed me how to do it, but it went by so quick. Hopefully this helps me to understand it (01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! I remember when my wordpress got pwned recently. My friend showed me how to do it, but it went by so quick. Hopefully this helps me to understand it
04-02-2025, 05:44 PM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !! thanks for sharing
04-02-2025, 09:55 PM
thanks for info
|
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| CVE-2024-5630 WordPress RCE via zip bypass upload | 61 | 6,437 |
11-01-2026, 10:10 AM Last Post: |
||
| Pinterest Exploit: Disable Video Pin Comments & Highlight Attacker's Comment | 2 | 922 |
10-24-2026, 08:33 AM Last Post: |
||
| [POC] Google OAuth "MultiLogin" endpoint 0-day | 106 | 13,356 |
02-10-2026, 03:34 PM Last Post: |
||
| Cool Remote Patching ETW/Amsi PoC | 6 | 2,147 |
02-08-2026, 07:58 AM Last Post: |
||
| CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC | 3 | 286 |
02-07-2026, 03:32 PM Last Post: |
||