new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
#31
[quote="zinzeur" pid='352841' dateline='1705249732']
Esta é uma vulnerabilidade totalmente nova (lançada há cerca de 3 dias) que afeta sites wordpress (qualquer versão) com a versão instalada do plugin post smtp <= 2.8.7 (a mais recente é 2.8.9). Ele permite o controle completo do administrador, redefinindo a senha e recuperando e-mails enviados da API de log smtp. Aproveitar !!
ps: O vídeo é meu
vídeo :
Aproveitar
[/citar]
thanks for post brother

[url=https://raidforums.im/private.php?action=send&uid=13584][/url]
Ban reason: Document sales are not permitted on this forum. (Permanent)
Reply
#32
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

tks rlly much lol.
Reply
#33
Thankyou very much for the share. Will see if it works.
Reply
#34
thanks for vuln
Reply
#35
thanks, check it out
Reply
#36
Thanks for sharing
Reply
#37
does it works still or not
Reply
#38
thank you so much
Reply
#39
Lets see this, sounds interesting
Reply
#40
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

thank you so much
Ban reason: Replying With Hidden Content (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CVE-2024-5630 WordPress RCE via zip bypass upload HA_twck 61 6,430 11-01-2026, 10:10 AM
Last Post: H0lyM0ly
  Pinterest Exploit: Disable Video Pin Comments & Highlight Attacker's Comment erjdfrqowe 2 922 10-24-2026, 08:33 AM
Last Post: tomben
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,356 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,147 02-08-2026, 07:58 AM
Last Post: zeroday99
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 282 02-07-2026, 03:32 PM
Last Post: cysc



 Users browsing this thread: 2 Guest(s)