Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-11877. PoCs published by moritakaaz.
AI-analyzed exploit summary This repository contains a functional Go-based exploit for CVE-2025-11877, targeting the User Activity Log WordPress plugin (≤ 2.2). The exploit leverages an unauthenticated options update vulnerability to enable user registration or modify other site options by sending crafted failed login attempts.
Description
The User Activity Log plugin is vulnerable to a limited options update in versions up to, and including, 2.2. The failed-login handler 'ual_shook_wp_login_failed' lacks a capability check and writes failed usernames directly into update_option() calls. This makes it possible for unauthenticated attackers to push select site options from 0 to a non-zero value, allowing them to reopen registration or corrupt options like 'wp_user_roles', breaking wp-admin access. CVE-2025-13471 appears to be a duplicate of this CVE.
Exploits (1)
This repository contains a functional Go-based exploit for CVE-2025-11877, targeting the User Activity Log WordPress plugin (≤ 2.2). The exploit leverages an unauthenticated options update vulnerability to enable user registration or modify other site options by sending crafted failed login attempts.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N