SureTriggers <= 1.0.78 - Authorization Bypass Exploit

This tool exploits an authorization bypass vulnerability in the SureTriggers WordPress plugin (versions <= 1.0.78), allowing unauthenticated attackers to create new WordPress user accounts.

🔥 Developed by 0xgh057r3c0n

📌 Vulnerability Details

• Plugin Name: SureTriggers
• Affected Versions: <= 1.0.78
• CVE: Pending
• Vulnerability Type: Authorization Bypass → Unauthenticated User Creation
• Attack Vector: Remote (unauthenticated HTTP POST request)
• Impact: Allows arbitrary user registration with attacker-defined credentials.

⚙️ Features

• Automatically fetches and verifies the installed plugin version
• Bypasses authorization and creates a new WordPress user
• Customizable email, username, and password via CLI
• Color-coded terminal output
• Default credentials available for fast testing

🚀 Usage

🔧 Requirements

• Python 3.x
• Modules: requests, colorama

Install dependencies:

pip3 install -r requirements.txt

Or manually:

pip3 install requests colorama

🛠️ Running the Exploit

python3 CVE-2025-3102.py -u <target_url> [--newmail <email>] [--newuser <username>] [--newpassword <password>]

🔍 Example:

python3 CVE-2025-3102.py -u https://target-site.com --newuser hacker --newpassword Pass123!

📋 Options

🧠 How It Works

1. Checks the plugin version by reading readme.txt.
2. Constructs a special request to wp-json/sure-triggers/v1/automation/action.
3. Sends a POST request to create a user, exploiting the missing authentication.
4. Displays success or failure with credential info.

⚠️ Disclaimer

This tool is provided for educational and authorized penetration testing purposes only. Unauthorized access to systems is illegal and punishable under law. The author is not responsible for any misuse or damage caused.

📞 Author

• Name: Gaurav Bhattacharjee (aka 0xgh057r3c0n)
• GitHub: github.com/0xgh057r3c0n
• Email: [email protected]
• LinkedIn: linkedin.com/in/gaurav-bhattacharjee