Price: 0.00760041 BTC

$476.70 USD (by current exchange rate)

Sale Count: Unlimited

Total: 4 file(s)

Hidden text contain: 0 symbol(s)

Download file(s):

other.zip 8311.8KB
proof.mp4 3803KB
README.txt 0.84KB
requirements.txt 0.03KB

Info(Description by file owner):

CVE-2025-4322 - Unverified Password Change (CWE-620) - Exploit

Attackers can completely compromise WordPress sites running the Motors theme by:
1. Changing passwords for any user without authentication
2. Gaining full administrative access to the WordPress site
3. Potentially executing malicious actions with admin privileges
4. Compromising site confidentiality, integrity, and availability

Exploit Features
✅ Automated Exploitation – Extracts nonce, logs in, and uploads the shell automatically.
✅ Version Check – Confirms if the target is vulnerable before exploitation.
✅ Error Handling – Ensures smooth execution even in case of failures.
✅ Session Handling – Uses persistent session management for authentication.
✅ Real-time Feedback – Provides output at each step.