Activity and trending
Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending
WPMgr v0.61.199 High 8.1 Remote 2FA bypass. Invitation accept mints a full session with a stolen password and no authenticator code. Login still challenges. Session can switch into the victim org.
Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending
☠️🔥 WPMgr 0day! 4 remote bugs! WordPress! 🔥☠️ 1. 2FA bypass · Remote · Skip the authenticator app! 🚪 2. OAuth account-linking · Remote · Log in with a password you never set. 🔑 3. Default…
@abraxas_null · x.com