CVE-2021-34646

This exploit leverages an authentication bypass vulnerability in the WooCommerce Booster Plugin by generating multiple timestamps to craft a valid verification token, allowing unauthorized access to user accounts.

This repository contains a functional Python script that exploits an authentication bypass vulnerability in the Booster for WooCommerce WordPress plugin (CVE-2021-34646). The exploit leverages weak random token generation in the email verification process to impersonate arbitrary users, including administrators.

This repository contains a functional exploit for CVE-2021-34646, an authentication bypass vulnerability in the WooCommerce Booster Plugin. The exploit generates multiple timed tokens to bypass authentication by leveraging a predictable MD5 hash mechanism.