new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
#41
thanks, Hot thread
Reply
#42
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

ok lets seeee what we get ......
Ban reason: Advertising telegram in stealer logs (Permanent)
Reply
#43
thanks for sharing my bro
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#44
thank you very much
Reply
#45
nice bro thanks for sharing
Reply
#46
zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz
Ban reason: Spamming | CC (Permanent)
Reply
#47
Nice info. Check it.
Reply
#48
Great to see this
Reply
#49
thanks for the info!
Reply
#50
letss check! thanks for the data
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CVE-2024-5630 WordPress RCE via zip bypass upload HA_twck 61 6,430 11-01-2026, 10:10 AM
Last Post: H0lyM0ly
  Pinterest Exploit: Disable Video Pin Comments & Highlight Attacker's Comment erjdfrqowe 2 922 10-24-2026, 08:33 AM
Last Post: tomben
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,356 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,147 02-08-2026, 07:58 AM
Last Post: zeroday99
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 281 02-07-2026, 03:32 PM
Last Post: cysc



 Users browsing this thread: 1 Guest(s)