{"uuid": "73da8683-da90-4f1b-90b9-66f81af65c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38389", "type": "published-proof-of-concept", "source": "https://t.me/DEVIL_La_RSx/682", "content": "CVE-2023-38389 &lt; Wordpress &lt; JupiterX Core &lt; Unauthenticated Account Takeover\n\nA relatively new and quite effective exploit, designed for unauthorized authentication with subsequent takeover of a worldpress account. Based on vulnerabilities in the third-party add-on JupiterX Core. Vulnerable machines can be found using the following google door: inurl: wp-content/plugins/jupiterx-core/\n\nhttps://github.com/codeb0ss/CVE-2023-38389-PoC", "creation_timestamp": "2024-11-22T09:56:56.000000Z"}