Serious WordPress Vulnerability/Exploit Verion 2.0.3 and Below

DumpBrowserSecrets is a post‑exploitation browser credential‑harvesting tool from Maldev Academy that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from major Chromium‑based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, uses DPAPI/NSS handling where applicable, includes multiple evasion techniques, outputs structured JSON, and is positioned for red‑team/assumed‑breach testing while also being applicable to adversaries seeking rapid SaaS and lateral access.