Activity and trending
Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending
WPMgr v0.61.199 High 8.1 Remote OAuth leftover. A self-serve planted password on a victim email survives verify and Google/GitHub/OIDC link. Attacker then logs in as the victim.
Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending
☠️🔥 WPMgr 0day! 4 remote bugs! WordPress! 🔥☠️ 1. 2FA bypass · Remote · Skip the authenticator app! 🚪 2. OAuth account-linking · Remote · Log in with a password you never set. 🔑 3. Default…
@abraxas_null · x.com