Ultimate Member WordPress Plugin 2.6.6 – Privilege Escalation
#!/usr/bin/env python3 # Exploit Title: Ultimate Member WordPress Plugin 2.6.6 – Privilege Escalation # Exploit Author: Gurjot Singh # CVE: CVE-2023-3460 # Description : The attached PoC demonstrates how an unauthenticated attacker can escalate privileges to admin by abusing unsanitized input in `wp_capabilities` during registration. import requests import argparse import re import…


