homjxi0e/CVE-2017-8295-WordPress-4.7.4---Unauthorized-Password-Reset

PoC

homjxi0e/CVE-2017-8295-WordPress-4.7.4---Unauthorized-Password-Reset

view exploit source poc_in_githubauthor homjxi0epublished 2017-05-04catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-8295USmedium5.9Exploit
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a craf…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan