{"uuid": "ab6fde57-e8a6-449b-a18a-b76c4ed0b439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/362", "content": "CVE-2025-34077\n\nAn authentication bypass vulnerability exists in the WordPress Pie Register plugin = 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n\nGitHub Link:\nhttps://github.com/salimelh94/Web-Penetration-Test", "creation_timestamp": "2026-08-28T00:00:30.665050Z"}