dthkhang/cve-2023-5561-pocPoC exploit for CVE-2023-5561 that enumerates WordPress user email addresses via the /wp-json/wp/v2/users API endpoint. For authorized security testing and education.
This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the /wp-json/wp/v2/users API endpoint.
requests libraryInstall the required library:
pip install requests
https://target.com).python CVE-2023-5561.py <target site root url>
Example:
python CVE-2023-5561.py https://target.com
The script will list found users and attempt to brute-force and reveal the full email address for each user if possible.