CVE-2021-34621

This exploit leverages an unauthenticated privilege escalation vulnerability in WordPress Plugin ProfilePress (CVE-2021-34621) by sending a crafted POST request to admin-ajax.php, allowing an attacker to create an administrator account.

The repository contains only a README.md with the CVE identifier and no exploit code or technical details. It is a placeholder with minimal content.

This repository contains a functional exploit for CVE-2021-34621, a privilege escalation vulnerability in the ProfilePress WordPress plugin. The exploit demonstrates how an attacker can register a new user with administrator privileges by manipulating the 'wp_capabilities[administrator]' parameter in the registration process.

The repository contains a functional Python exploit for CVE-2021-34621, which leverages an unauthenticated privilege escalation vulnerability in ProfilePress (versions 3.0 to 3.1.3). The exploit sends a crafted POST request to register a user with administrator privileges by manipulating the 'wp_capabilities' parameter.