https://poc.intelseclab.com/tags/account-takeover/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13390-wp-directory-kit-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13390-wp-directory-kit-auth-bypass/Critical severity (CVSS 10) — web · CVE-2025-13390. Status: Weaponized. Affects: WP Directory Kit (WordPress plugin). Tags: wordpress, wp-directory-kit, authentication-bypass, predictable-token, account-takeover, webshell-upload, python, cwe-287.webCriticalwordpresswp-directory-kitauthentication-bypasspredictable-tokenaccount-takeoverwebshell-uploadpythoncwe-287https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-53580-sbd-password-reset-privesc/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-53580-sbd-password-reset-privesc/Critical severity (CVSS 9.8) — web · CVE-2025-53580. Status: Weaponized. Affects: quantumcloud "Simple Business Directory Pro" WordPress plugin (simple-business-directory-pro). Tags: wordpress, wordpress-plugin, simple-business-directory-pro, password-reset, privilege-escalation, incorrect-privilege-assignment, cwe-266, account-takeover, unauthenticated, python.webCriticalwordpresswordpress-pluginsimple-business-directory-propassword-resetprivilege-escalationincorrect-privilege-assignmentcwe-266account-takeoverunauthenticatedpythonhttps://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-9209-restropress-jwt-forgery/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-9209-restropress-jwt-forgery/Critical severity (CVSS 9.8) — web · CVE-2025-9209. Status: Weaponized. Affects: RestroPress – Online Food Ordering System (WordPress plugin). Tags: restropress, wordpress, wordpress-plugin, information-exposure, jwt, authentication-bypass, account-takeover, rest-api, mass-scanner, cwe-200, cwe-287, python.webCriticalrestropresswordpresswordpress-plugininformation-exposurejwtauthentication-bypassaccount-takeoverrest-apimass-scannercwe-200cwe-287pythonhttps://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-61922-prestashop-checkout-account-takeover/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-61922-prestashop-checkout-account-takeover/Critical severity (CVSS 9.1) — web · CVE-2025-61922. Status: PoC. Affects: PrestaShop Checkout module (ps_checkout). Tags: prestashop, ps_checkout, account-takeover, express-checkout, paypal, zero-click, session-hijacking, e-commerce, cwe-287.webCriticalprestashopps_checkoutaccount-takeoverexpress-checkoutpaypalzero-clicksession-hijackinge-commercecwe-287https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-58434-flowise-auth-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-58434-flowise-auth-bypass/Critical severity (CVSS 9.8) — web · CVE-2025-58434. Status: Weaponized. Affects: FlowiseAI (/api/v1/account/forgot-password and /api/v1/account/reset-password endpoints). Tags: flowiseai, auth-bypass, account-takeover, forgot-password, reset-password, api, python, cwe-640.webCriticalflowiseaiauth-bypassaccount-takeoverforgot-passwordreset-passwordapipythoncwe-640https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39912-xboard-v2board-account-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-39912-xboard-v2board-account-takeover/Critical severity (CVSS 9.1) — web · CVE-2026-39912. Status: Weaponized. Affects: V2Board / Xboard (VPN/proxy subscription management panels). Tags: xboard, v2board, php, laravel, account-takeover, magic-link, unauthenticated, information-disclosure, proxy-panel.webCriticalxboardv2boardphplaravelaccount-takeovermagic-linkunauthenticatedinformation-disclosureproxy-panelhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5415-wp-captcha-pro-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5415-wp-captcha-pro-auth-bypass/High severity (CVSS 8.8) — web · CVE-2026-5415. Status: PoC. Affects: WP Captcha PRO (WordPress plugin, Advanced Google reCAPTCHA). Tags: wordpress, wp-captcha-pro, auth-bypass, privilege-escalation, nonce, ajax, account-takeover, plugin.webHighwordpresswp-captcha-proauth-bypassprivilege-escalationnonceajaxaccount-takeoverpluginhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-12416-wp-password-reset-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-12416-wp-password-reset-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-12416, CVE-2026-12417. Status: Weaponized. Affects: SignUp & SignIn WordPress plugin (CVE-2026-12417); Invoice Generator WordPress plugin (CVE-2026-12416). Tags: wordpress, wp-plugin, account-takeover, password-reset, auth-bypass, ajax, mass-exploitation.webCriticalwordpresswp-pluginaccount-takeoverpassword-resetauth-bypassajaxmass-exploitationhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37072-veno-file-manager-superadmin-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37072-veno-file-manager-superadmin-takeover/Critical severity — web · CVE-2026-37072. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, unauthenticated, local-file-inclusion, account-takeover, php, veno-file-manager.webCriticalfile-managerunauthenticatedlocal-file-inclusionaccount-takeoverphpveno-file-managerhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-7671-tornet-scooter-otp-bruteforce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-7671-tornet-scooter-otp-bruteforce/Medium severity — web · CVE-2026-7671. Status: PoC. Affects: Tornet Scooter Mobile App backend (/TwoFactor endpoint), Android app v4.75. Tags: tornet-scooter, otp-bruteforce, missing-rate-limiting, cwe-307, mobile-backend, account-takeover.webMediumtornet-scooterotp-bruteforcemissing-rate-limitingcwe-307mobile-backendaccount-takeoverhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27886-strapi-account-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27886-strapi-account-takeover/Critical severity — web · CVE-2026-27886. Status: Weaponized. Affects: Strapi CMS (Content API). Tags: strapi, cms, account-takeover, password-reset, boolean-oracle, api-filter-bypass, authentication.webCriticalstrapicmsaccount-takeoverpassword-resetboolean-oracleapi-filter-bypassauthenticationhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23760-smartermail-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23760-smartermail-auth-bypass/Critical severity (CVSS 9.3) — web · CVE-2026-23760. Status: PoC. Affects: SmarterTools SmarterMail. Tags: smartermail, authentication-bypass, password-reset, account-takeover, rce, email-server, watchtowr.webCriticalsmartermailauthentication-bypasspassword-resetaccount-takeoverrceemail-serverwatchtowrhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-7459-poc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-7459-poc/High severity (CVSS 7.5) — web · CVE-2026-7459. Status: PoC. Affects: Simple History (WordPress plugin). Tags: wordpress, simple-history, broken-access-control, account-takeover, rest-api, password-reset.webHighwordpresssimple-historybroken-access-controlaccount-takeoverrest-apipassword-resethttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40487-postiz-svg-upload-xss/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40487-postiz-svg-upload-xss/High severity (CVSS 8.9) — web · CVE-2026-40487 / GHSA-44wg-r34q-hvfx. Status: PoC. Affects: Postiz (open-source social media management platform, gitroomhq/postiz-app). Tags: file-upload, mime-spoofing, stored-xss, account-takeover, postiz, nodejs, oauth-backdoor.webHighfile-uploadmime-spoofingstored-xssaccount-takeoverpostiznodejsoauth-backdoorhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44166-pocketbase-oauth2-account-prehijack/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44166-pocketbase-oauth2-account-prehijack/Medium severity (CVSS 6.1) — web · CVE-2026-44166 / [GHSA-pq7p-mc74-g65w](https://github.com/pocketbase/pocketbase/security/advisories/GHSA-pq7p-mc74-g65w). Status: PoC. Affects: [PocketBase](https://github.com/pocketbase/pocketbase) (Go backend / BaaS). Tags: pocketbase, oauth2, account-takeover, account-pre-hijacking, cwe-287, improper-authentication, go.webMediumpocketbaseoauth2account-takeoveraccount-pre-hijackingcwe-287improper-authenticationgohttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6741-latepoint-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6741-latepoint-privesc/High severity (CVSS 8.8) — web · CVE-2026-6741. Status: PoC. Affects: LatePoint – Calendar Booking Plugin for Appointments and Events (WordPress plugin, slug latepoint). Tags: wordpress, latepoint, privilege-escalation, abilities-api, rest-api, account-takeover, cwe-269.webHighwordpresslatepointprivilege-escalationabilities-apirest-apiaccount-takeovercwe-269https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-8206-kirki-password-reset-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-8206-kirki-password-reset-takeover/Critical severity (CVSS 9.8) — web · CVE-2026-8206. Status: PoC. Affects: Kirki (WordPress Customizer framework plugin) — CompLibFormHandler REST API endpoint. Tags: wordpress, kirki, account-takeover, password-reset-hijack, unauthenticated, rest-api.webCriticalwordpresskirkiaccount-takeoverpassword-reset-hijackunauthenticatedrest-apihttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-10580-hippoo-woocommerce-authbypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-10580-hippoo-woocommerce-authbypass/Critical severity (CVSS 9.8) — web · CVE-2026-10580. Status: Weaponized. Affects: Hippoo Mobile App for WooCommerce (WordPress plugin). Tags: wordpress, plugin, woocommerce, hippoo, authentication-bypass, account-takeover, rest-api, unauthenticated.webCriticalwordpresspluginwoocommercehippooauthentication-bypassaccount-takeoverrest-apiunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-52813-gogs-path-traversal-hook-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-52813-gogs-path-traversal-hook-rce/Info severity — web · CVE-2026-52813. Status: PoC. Affects: Gogs (self-hosted Git service), organization creation feature. Tags: gogs, path-traversal, git-hooks, rce, authenticated, account-takeover, self-hosted-git.webInfogogspath-traversalgit-hooksrceauthenticatedaccount-takeoverself-hosted-githttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53647-fossbilling-chained-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53647-fossbilling-chained-rce/Medium severity (CVSS 6.9) — web · CVE-2026-53647 (also documents chained CVE-2026-53646). Status: PoC. Affects: FOSSBilling (open-source billing/client management platform). Tags: fossbilling, api-key-disclosure, password-reset, token-reuse, account-takeover, unauthenticated, ghsa, php.webMediumfossbillingapi-key-disclosurepassword-resettoken-reuseaccount-takeoverunauthenticatedghsaphphttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5229-form-notify-line-oauth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5229-form-notify-line-oauth-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-5229. Status: PoC. Affects: Form Notify WordPress plugin, LINE Login OAuth 2.0 integration (src/APIs/Line/Login/Route.php, User.php). Tags: wordpress, form-notify, oauth, line-login, authentication-bypass, account-takeover, cookie-injection, cve-2026-5229.webCriticalwordpressform-notifyoauthline-loginauthentication-bypassaccount-takeovercookie-injectioncve-2026-5229https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49952-discuz-race-condition-captcha-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49952-discuz-race-condition-captcha-rce/Critical severity — web · CVE-2026-49952 (chain also referenced as KIS-2026-09, KIS-2026-10, KIS-2026-11). Status: PoC. Affects: Discuz! X5.0 (PHP-based forum/CMS software). Tags: discuz, php, forum, race-condition, captcha-bypass, ocr, account-takeover, lfi, webshell, rce, pre-auth.webCriticaldiscuzphpforumrace-conditioncaptcha-bypassocraccount-takeoverlfiwebshellrcepre-authhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-8181-burst-statistics-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-8181-burst-statistics-auth-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-8181. Status: PoC. Affects: Burst Statistics – Privacy-Friendly WordPress Analytics (burst-statistics plugin). Tags: wordpress, burst-statistics, authentication-bypass, cwe-287, application-password, account-takeover, mainwp.webCriticalwordpressburst-statisticsauthentication-bypasscwe-287application-passwordaccount-takeovermainwphttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-11551-branda-wp-account-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-11551-branda-wp-account-takeover/Critical severity (CVSS 9.8) — web · CVE-2026-11551. Status: Weaponized. Affects: Branda White Label & Branding WordPress plugin. Tags: wordpress, plugin, account-takeover, privilege-escalation, unauthenticated, multisite, branda.webCriticalwordpresspluginaccount-takeoverprivilege-escalationunauthenticatedmultisitebrandahttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54415-azuriom-account-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54415-azuriom-account-takeover/High severity (CVSS 3.1) — web · CVE-2026-54415. Status: PoC. Affects: Azuriom CMS. Tags: azuriom, cms, broken-access-control, cwe-862, cwe-269, privilege-escalation, account-takeover, php, laravel, azlink.webHighazuriomcmsbroken-access-controlcwe-862cwe-269privilege-escalationaccount-takeoverphplaravelazlinkhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5076-armember-password-reset-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5076-armember-password-reset-takeover/Critical severity (CVSS 9.8) — web · CVE-2026-5076 (chained with CVE-2026-5073, CVE-2026-5074). Status: PoC. Affects: ARMember – Membership Plugin & Content Restriction (WordPress plugin). Tags: wordpress, armember, membership-plugin, sql-injection, password-reset, plaintext-key, account-takeover, cwe-640.webCriticalwordpressarmembermembership-pluginsql-injectionpassword-resetplaintext-keyaccount-takeovercwe-640