CVE-2025-39459

This repository contains a functional Python exploit for CVE-2025-39459, an unauthenticated privilege escalation vulnerability in the Real Estate 7 WordPress theme (<= 3.5.2). The exploit automates the process of registering a new user with administrator privileges by extracting a nonce and submitting a crafted request to the vulnerable endpoint.

This repository contains a functional exploit for CVE-2025-39459, targeting a WordPress vulnerability that allows unauthorized user registration with administrator privileges. The exploit automates the process of creating admin accounts by leveraging a flawed registration mechanism in the target software.

This repository contains a Nuclei template designed to detect an unauthenticated privilege escalation vulnerability (CVE-2025-39459) in the Real Estate 7 WordPress Theme. The template automates the process of extracting a nonce and sending a crafted request to exploit the vulnerability, checking for successful administrator registration.

This repository contains a functional exploit for CVE-2025-39459, targeting a WordPress registration vulnerability that allows unauthenticated user creation with administrator privileges. The exploit automates the process of extracting a nonce, crafting a malicious registration request, and verifying success.

The repository contains a functional Python exploit for CVE-2025-39459, targeting a WordPress registration vulnerability to create an administrator account. The exploit automates the process of extracting a nonce, crafting a malicious registration request, and verifying success.