{"vulnerability": "CVE-2025-34077", "sightings": [{"uuid": "ef50d86d-8802-48fc-960f-5b9c603c98be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw56l46m24", "content": "", "creation_timestamp": "2025-07-23T21:02:34.336346Z"}, {"uuid": "69258bba-1b36-4b6d-8236-3e6168eecf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "7d5d9228-4025-4f3e-8f01-53048a72eab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-34077.yaml", "content": "", "creation_timestamp": "2025-07-27T04:19:38.000000Z"}, {"uuid": "2cfe838c-dc8a-4686-bb55-9a6d40ede36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lv2ihrrmsf24", "content": "", "creation_timestamp": "2025-07-28T21:02:20.682728Z"}, {"uuid": "92de9d23-2434-4906-9128-ee4c65b9f2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbxqmuq2b", "content": "", "creation_timestamp": "2025-08-03T21:03:01.413281Z"}, {"uuid": "a10dbac0-b2bb-4fe9-9936-e0d2df8181f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_pie_register_bypass_rce.rb", "content": "", "creation_timestamp": "2021-11-02T14:37:05.000000Z"}, {"uuid": "6239cd3e-c8fa-40ff-9e12-247d35f0fb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/_uEPSzFNr6HqJN1CCE1x2MfixnAoe1zyVBXupCwzjdQjfEc", "content": "", "creation_timestamp": "2026-04-09T21:00:05.000000Z"}, {"uuid": "874ad9e2-29bb-4fd5-a5bd-abf9bae86f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/Qg5H5RrMFMk89xXvw_AzTeYXDboG-6t4YxNm39dIbZW6yTo", "content": "", "creation_timestamp": "2025-07-28T23:00:09.000000Z"}, {"uuid": "cf18fc13-6f1b-4a63-9e5c-8401abed5a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/o8ZKoWV2Y_A2XRg1P8qW1kiSLgUFj0IHGqQJ6A5ARyKaU-0", "content": "", "creation_timestamp": "2025-07-29T03:00:05.000000Z"}, {"uuid": "775eb31a-c7b3-47fc-8023-7e09ae4a88ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/VL2zkodKXJ4s7-qnqkcGB4g3iOsCKYXSgneWGoW9UEmWyHE", "content": "", "creation_timestamp": "2025-07-10T03:00:13.000000Z"}, {"uuid": "d76faae0-ad5c-4356-925d-4a470de10128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/j9hhUGrn1UjsT61HvOuwLNUknuYr4whXlqdhwz-FvQYkdb4", "content": "", "creation_timestamp": "2025-07-10T07:00:11.000000Z"}, {"uuid": "ab6fde57-e8a6-449b-a18a-b76c4ed0b439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/362", "content": "CVE-2025-34077\n\nAn authentication bypass vulnerability exists in the WordPress Pie Register plugin = 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n\nGitHub Link:\nhttps://github.com/salimelh94/Web-Penetration-Test", "creation_timestamp": "2026-08-28T00:00:30.665050Z"}, {"uuid": "06f9dc80-8102-4fcb-9411-b8245def31e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://t.me/cve0day/362", "content": "CVE-2025-34077\n\nAn authentication bypass vulnerability exists in the WordPress Pie Register plugin = 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n\nGitHub Link:\nhttps://github.com/salimelh94/Web-Penetration-Test", "creation_timestamp": "2026-08-27T15:00:09.043278Z"}, {"uuid": "c2315552-e8c2-4c87-816c-f63c402e3b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "Telegram/e1Caytt7o3CU8fUDytk0bAna7P5-tN7kuZQtd1sYjUWP61A", "content": "", "creation_timestamp": "2026-09-07T20:00:04.067397Z"}, {"uuid": "beb6db87-8975-40e3-bef7-3457646b7a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/e1Caytt7o3CU8fUDytk0bAna7P5-tN7kuZQtd1sYjUWP61A", "content": "", "creation_timestamp": "2026-09-08T00:00:24.613312Z"}, {"uuid": "d52f6a06-97bd-4b67-a7ca-8ba26988eab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_pie_register_bypass_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"h00die\", \"Lotfi13-DZ\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module uses an authentication bypass vulnerability in\\n          Wordpress Plugin Pie Register <= 3.7.1.4 to generate a valid cookie.\\n          With this cookie, hopefully of the admin, it will generate a plugin,\\n          pack the payload into it and upload it to a server running WordPress.\", \"disclosure_date\": \"2021-10-08\", \"fullname\": \"exploit/unix/webapp/wp_pie_register_bypass_rce\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"WordPress Plugin Pie Register Auth Bypass to RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"config-changes\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/unix/webapp/wp_pie_register_bypass_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/wp_pie_register_bypass_rce\", \"references\": [\"CVE-2025-34077\", \"EDB-50395\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"WordPress\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:51.390374Z"}]}