Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-4606 — Python-based scanner that tests WordPress sites for CVE-2025-4606, a privilege escalation vulnerability in the Sala theme allowing unauthenticated account takeover via password reset. | Kitploit
Tools/GitHubGitHub/yetazyyy/cve-2025-4606
Privilege EscalationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubyetazyyy/cve-2025-4606

CVE-2025-4606

Python-based scanner that tests WordPress sites for CVE-2025-4606, a privilege escalation vulnerability in the Sala theme allowing unauthenticated account takeover via password reset.

View Repository
26 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-4606

Overview

This tool is used to test the vulnerability CVE-2025-4606 in WordPress using the Sala – Startup & SaaS WordPress Theme. This vulnerability allows Privilege Escalation through Account Takeover because the theme does not properly validate user identity before updating sensitive data such as passwords. As a result, an unauthenticated attacker can change other users' passwords, including administrators, which can lead to full website takeover.

Developer: Ohang
Thanks to: @C4p333
Purpose: Security Research & Educational Use

Installation

  • Termux
  • Pydroid 3

1. Clone or Download

root@kitploit:~
git clone https://github.com/Yetazyyy/CVE-2025-4606.git
cd CVE-2025-4606
git pull
python scanner.py
Download Tool