CVE-2023-5561

This PoC exploits CVE-2023-5561, an information leakage vulnerability in WordPress REST API, allowing unauthenticated attackers to discern user email addresses via an Oracle-style attack. The script brute-forces email domains and IDs by leveraging the API's improper search field restrictions.

This PoC exploits CVE-2023-5561, a WordPress REST API vulnerability, to brute-force user email addresses by leveraging the search parameter in the /wp-json/wp/v2/users endpoint. It includes a 10-second delay between requests to avoid detection.

This PoC exploits CVE-2023-5561 to enumerate WordPress user email addresses via the `/wp-json/wp/v2/users` API endpoint by brute-forcing domain names. It uses multiprocessing to efficiently test possible email combinations.