new wordpress website takeover vuln (video + poc )
by zinzeur - Sunday January 14, 2024 at 04:28 PM
Elite User

Posts: 122
Threads: 19
Joined: Sep 2023
Reputation: -381

#1
01-14-2024, 04:28 PM
This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Hidden Content
You must register or login to view this content.
exploit:
Hidden Content
You must register or login to view this content.
Enjoy
Reply
Breached
Member
Posts: 8
Threads: 0
Joined: Jul 2023
Reputation: 0

#2
02-15-2024, 08:53 PM
thank you so much
Reply
Breached
Member
Posts: 12
Threads: 2
Joined: Dec 2023
Reputation: 0

#3
02-16-2024, 04:41 PM
Nice info. Check it.
Reply
GOD User
God
Posts: 1
Threads: 0
Joined: Oct 2023
Reputation: 30

#4
02-17-2024, 03:58 AM
thanks for info
Reply
Breached
Member
Posts: 22
Threads: 2
Joined: Jul 2023
Reputation: 0

#5
02-17-2024, 04:39 AM
wow i love this kind of exploits
Reply
Breached
Member
Posts: 18
Threads: 0
Joined: Feb 2024
Reputation: 0

#6
02-18-2024, 06:28 PM
thanks for info
Reply
Breached
Member
Posts: 5
Threads: 0
Joined: Feb 2024
Reputation: 0

#7
02-19-2024, 08:42 PM
wow i love this kind of exploits I will try, master. I hope you are always healthy
Reply
Banned

Posts: 20
Threads: 1
Joined: Jul 2023
Reputation: 0

#8
02-21-2024, 08:08 PM
thank you very much sir..!
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect.
Reply
Breached
Member
Posts: 14
Threads: 0
Joined: Feb 2024
Reputation: 0

#9
02-22-2024, 09:12 AM
Nice info. Check it.
Reply
Breached
Member
Posts: 3
Threads: 0
Joined: Feb 2024
Reputation: 0

#10
02-22-2024, 09:21 AM
(01-14-2024, 04:28 PM)zinzeur Wrote: This is a brand new vuln (released about 3 days ago) affecting wordpress websites (any version) with post smtp plugin installed version <=2.8.7 (latest is 2.8.9). It allows complete admin takeover by ressetting password and retrieving sent email from smtp log api . Enjoy !!
ps: The video is mine
video :
Enjoy

ok thank you brother
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,201 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,092 02-08-2026, 07:58 AM
Last Post: zeroday99
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 73 02-07-2026, 03:32 PM
Last Post: cysc
  POC CVE-2025-24071 caca28sapo1 15 805 02-07-2026, 08:53 AM
Last Post: hacker0123
  WordPress LFI to RCE - CVE-2025-0366 Serious 1 457 02-05-2026, 09:53 AM
Last Post: Sammm89



 Users browsing this thread: 1 Guest(s)