https://poc.intelseclab.com/tags/admin-takeover/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-6389-wordpress-rogue-admin-user-creation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-6389-wordpress-rogue-admin-user-creation/Critical severity (CVSS 9.8) — web · CVE-2025-6389. Status: Weaponized. Affects: Sneeit Framework (WordPress theme framework plugin, sneeit-framework). Tags: wordpress, sneeit-framework, rce, call_user_func, unauthenticated, wp_insert_user, privilege-escalation, admin-takeover, cwe-94, wp-ajax-nopriv.webCriticalwordpresssneeit-frameworkrcecall_user_funcunauthenticatedwp_insert_userprivilege-escalationadmin-takeovercwe-94wp-ajax-noprivhttps://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13342-frontend-admin-unauth-admin-creation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13342-frontend-admin-unauth-admin-creation/Critical severity (CVSS 9.8) — web · CVE-2025-13342. Status: Weaponized. Affects: Frontend Admin by DynamiApps (WordPress plugin built on Advanced Custom Fields / ACF frontend forms). Tags: wordpress, wordpress-plugin, frontend-admin, dynamiapps, acf, advanced-custom-fields, broken-access-control, cwe-284, privilege-escalation, unauthenticated, admin-takeover, python.webCriticalwordpresswordpress-pluginfrontend-admindynamiappsacfadvanced-custom-fieldsbroken-access-controlcwe-284privilege-escalationunauthenticatedadmin-takeoverpythonhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40791-wp-time-slots-booking-xss/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40791-wp-time-slots-booking-xss/High severity (CVSS 7.2) — web · CVE-2026-40791. Status: PoC. Affects: WP Time Slots Booking Form (wp-time-slots-booking-form WordPress plugin). Tags: wordpress, wordpress-plugin, stored-xss, unauthenticated, cwe-79, admin-takeover, booking-form.webHighwordpresswordpress-pluginstored-xssunauthenticatedcwe-79admin-takeoverbooking-formhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54807-woocommerce-reg-admin-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54807-woocommerce-reg-admin-privesc/Info severity — web · CVE-2026-54807. Status: PoC. Affects: WordPress plugin exposing a custom WooCommerce-style frontend registration form (form fields prefixed tgwcfb_*). Tags: wordpress, woocommerce, privilege-escalation, registration-form, admin-takeover, broken-access-control.webInfowordpresswoocommerceprivilege-escalationregistration-formadmin-takeoverbroken-access-controlhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1492-user-registration-membership-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1492-user-registration-membership-privesc/Critical severity (CVSS 9.8) — web · CVE-2026-1492. Status: Weaponized. Affects: User Registration & Membership WordPress plugin (Custom Registration Form Builder, Login Form, User Profile, Content Restriction & Membership). Tags: wordpress, privilege-escalation, unauthenticated, ajax, membership-plugin, admin-takeover, cwe-269.webCriticalwordpressprivilege-escalationunauthenticatedajaxmembership-pluginadmin-takeovercwe-269https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-10795-updraftplus-rpc-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-10795-updraftplus-rpc-rce/Critical severity — web · CVE-2026-10795. Status: Weaponized. Affects: UpdraftPlus (WordPress backup plugin) — UpdraftCentral remote RPC feature. Tags: wordpress, plugin, updraftplus, rpc, unauthenticated, admin-takeover, plugin-upload, rce, mass-exploitation.webCriticalwordpresspluginupdraftplusrpcunauthenticatedadmin-takeoverplugin-uploadrcemass-exploitationhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0920-lakit-elementor-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0920-lakit-elementor-privesc/Critical severity (CVSS 9.8) — web · CVE-2026-0920. Status: Weaponized. Affects: LA-Studio Element Kit for Elementor (WordPress plugin, slug lakit). Tags: wordpress, plugin, elementor, privilege-escalation, admin-takeover, unauthenticated, ajax, wp-ajax.webCriticalwordpresspluginelementorprivilege-escalationadmin-takeoverunauthenticatedajaxwp-ajaxhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5118-divi-form-builder-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5118-divi-form-builder-privesc/Critical severity (CVSS 9.8) — web · CVE-2026-5118. Status: PoC. Affects: Divi Form Builder (WordPress plugin). Tags: wordpress, divi-form-builder, privilege-escalation, role-injection, cwe-266, unauthenticated, admin-takeover, nonce-reuse.webCriticalwordpressdivi-form-builderprivilege-escalationrole-injectioncwe-266unauthenticatedadmin-takeovernonce-reusehttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1729-adforest-wp-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1729-adforest-wp-auth-bypass/Critical severity — web · CVE-2026-1729. Status: PoC. Affects: AdForest theme for WordPress. Tags: wordpress, adforest-theme, authentication-bypass, otp-login, ajax, admin-takeover, unauthenticated.webCriticalwordpressadforest-themeauthentication-bypassotp-loginajaxadmin-takeoverunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-07-03_gogs-admin-csrf-git-hook-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_gogs-admin-csrf-git-hook-rce/Critical severity — web · None assigned as of 2026-07-03. Status: Weaponized. Affects: Gogs (self-hosted Git service). Tags: gogs, csrf, git-hooks, privilege-escalation, rce, admin-takeover, git, self-hosted.webCriticalgogscsrfgit-hooksprivilege-escalationrceadmin-takeovergitself-hosted