{"uuid": "5436a845-ebde-41ea-84f9-0ad95c2042c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/433", "content": "--code: An authorization code already issued by Google (or a fake provider) for an unverified identity.\nTo obtain this --code, simply go to the wp-login.php page and click \"login with Google.\" Then, select the Gmail account you want to use to authorize the admin user access. after that, you will be redirected back to the website, and you will see something like this in the URL:\n\nsite.com/wp-login.php?code=...&state=...\n -> ?code= ...\n--code ...\n?code=...\npython poc-cve-2026-28185.py --host https://site.com/ --code ... --username admin@site.com\n\n \u203c\ufe0f this poc doesn\u2019t require authentication, but you do need to have the admin\u2019s email address of the website(for wp-login.php), and that email address must already exist as an admin account. That makes the process a bit difficult.", "creation_timestamp": "2026-08-19T00:00:27.262630Z"}