Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-48907 — Exploits CVE-2025-9209 in WordPress by querying /wp-json/wp/v2/users, harvesting user keys, tokens, and cookies, bypassing Defender/Imunify360, and logging vulnerable sites. | Kitploit
Tools/GitHubGitHub/87achrafg-stack/cve-2026-48907
Vulnerability ScannersExploitationIDS/IPS EvasionScripting & AutomationWeb Application ExploitationInformation Gathering
GitHub87achrafg-stack/cve-2026-48907

CVE-2026-48907

Exploits CVE-2025-9209 in WordPress by querying /wp-json/wp/v2/users, harvesting user keys, tokens, and cookies, bypassing Defender/Imunify360, and logging vulnerable sites.

View Repository
32 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-48907

Description This file CVE-2025-9209.py is a mass exploitation tool targeting vulnerability CVE-2025-9209.

Core functionalities:

  • Scans a list of sites by calling /wp-json/wp/v2/users
  • Analyzes the response to look for sensitive user data such as public and private keys, tokens, and cookie data
  • Ignores sites protected by Defender/Imunify360
  • Saves results in files: exposures.txt, tokens.txt, cookies.txt, exploited_sites.txt
  • Supports multi-threading and avoids blocking with a small delay between requests
  • Also added the signature https://t.me/FreeToolsCpa at the beginning of the file, in the banner, and at the end of the summary.
Download Tool