Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

CVE-2023-5089 PoC — Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

Source
Associated Vulnerability
Title:Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page) (CVE-2023-5089)
Description:The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.
Description
Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
Readme

<div align="center">
  <img src="https://blogs.cappriciosec.com/uploaders/CVE-2023-5089.png" alt="logo">
</div>


## Badges



[![MIT License](https://img.shields.io/badge/License-MIT-green.svg)](https://choosealicense.com/licenses/mit/)
![PyPI - Version](https://img.shields.io/pypi/v/CVE-2023-5089)
![PyPI - Downloads](https://img.shields.io/pypi/dm/CVE-2023-5089)
![GitHub all releases](https://img.shields.io/github/downloads/Cappricio-Securities/CVE-2023-5089/total)
<a href="https://github.com/Cappricio-Securities/CVE-2023-5089/releases/"><img src="https://img.shields.io/github/release/Cappricio-Securities/CVE-2023-5089"></a>![Profile_view](https://komarev.com/ghpvc/?username=Cappricio-Securities&label=Profile%20views&color=0e75b6&style=flat)
[![Follow Twitter](https://img.shields.io/twitter/follow/cappricio_sec?style=social)](https://twitter.com/cappricio_sec)
<p align="center">

<p align="center">







## License

[MIT](https://choosealicense.com/licenses/mit/)



## Installation 

1. Install Python3 and pip [Instructions Here](https://www.python.org/downloads/) (If you can't figure this out, you shouldn't really be using this)

   - Install via pip
     - ```bash
          pip install CVE-2023-5089 
        ```
   - Run bellow command to check
     - `CVE-2023-5089 -h`

## Configurations 
2. We integrated with the Telegram API to receive instant notifications for vulnerability detection.
   
   - Telegram Notification
     - ```bash
          CVE-2023-5089 --chatid <YourTelegramChatID>
        ```
   - Open your telegram and search for [`@CappricioSecuritiesTools_bot`](https://web.telegram.org/k/#@CappricioSecuritiesTools_bot) and click start

## Usages 
3. This tool has multiple use cases.
   
   - To Check Single URL
     - ```bash
          CVE-2023-5089 -u http://example.com 
        ```
   - To Check List of URL 
      - ```bash
          CVE-2023-5089 -i urls.txt 
        ```
   - Save output into TXT file
      - ```bash
          CVE-2023-5089 -i urls.txt -o out.txt
        ```
   - Want to Learn about [`CVE-2023-5089`](https://blogs.cappriciosec.com/cve/161/The%20WordPress%20Login%20Bypass%20in%20Defender%20Security%20Plugin%20(CVE-2023-5089))? Then Type Below command
      - ```bash
          CVE-2023-5089 -b
        ```
     
<p align="center">
  <b>🚨 Disclaimer</b>
  
</p>
<p align="center">
<b>This tool is created for security bug identification and assistance; Cappricio Securities is not liable for any illegal use. 
  Use responsibly within legal and ethical boundaries. 🔐🛡️</b></p>


## Working PoC Video

[![asciicast](https://blogs.cappriciosec.com/uploaders/Screenshot%202024-05-29%20at%2011.27.16%20AM.png)](https://asciinema.org/a/08XLxzsqKKPfGf284lmqisglp)




## Help menu

#### Get all items

```bash
👋 Hey Hacker
                                                                             v1.0
   _______    ________    ___   ____ ___  _____       __________  ____  ____
  / ____/ |  / / ____/   |__ \ / __ \__ \|__  /      / ____/ __ \( __ )/ __ \
 / /    | | / / __/________/ // / / /_/ / /_ <______/___ \/ / / / __  / /_/ /
/ /___  | |/ / /__/_____/ __// /_/ / __/___/ /_____/___/ / /_/ / /_/ /\__, /
\____/  |___/_____/    /____/\____/____/____/     /_____/\____/\____//____/

                              Developed By https://cappriciosec.com
                

CVE-2023-5089 : Bug scanner for WebPentesters and Bugbounty Hunters 

$ CVE-2023-5089 [option]

Usage: CVE-2023-5089 [options]
```


| Argument | Type     | Description                | Examples |
| :-------- | :------- | :------------------------- | :------------------------- |
| `-u` | `--url` | URL to scan | CVE-2023-5089 -u https://target.com |
| `-i` | `--input` | filename Read input from txt  | CVE-2023-5089 -i target.txt | 
| `-o` | `--output` | filename Write output in txt file | CVE-2023-5089 -i target.txt -o output.txt |
| `-c` | `--chatid` | Creating Telegram Notification | CVE-2023-5089 --chatid yourid |
| `-b` | `--blog` | To Read about CVE-2023-5089 Bug | CVE-2023-5089 -b |
| `-h` | `--help` | Help Menu | CVE-2023-5089 -h |



## 🔗 Links
[![Website](https://img.shields.io/badge/my_portfolio-000?style=for-the-badge&logo=ko-fi&logoColor=white)](https://cappriciosec.com/)
[![linkedin](https://img.shields.io/badge/linkedin-0A66C2?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/karthikeyan--v/)
[![twitter](https://img.shields.io/badge/twitter-1DA1F2?style=for-the-badge&logo=twitter&logoColor=white)](https://twitter.com/karthithehacker)



## Author

- [@karthithehacker](https://github.com/karthi-the-hacker/)



## Feedback

If you have any feedback, please reach out to us at contact@karthithehacker.com
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →