
This tool is used to test the vulnerability CVE-2025-4606 in WordPress using the Sala – Startup & SaaS WordPress Theme. This vulnerability allows Privilege Escalation through Account Takeover because the theme does not properly validate user identity before updating sensitive data such as passwords. As a result, an unauthenticated attacker can change other users' passwords, including administrators, which can lead to full website takeover.
Developer: Ohang
Thanks to: @C4p333
Purpose: Security Research & Educational Use
git clone https://github.com/Yetazyyy/CVE-2025-4606.git
cd CVE-2025-4606
git pull
python scanner.py