Critical XSS Flaw Affects WordPress 3.9.2 And Earlier

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored credentials and session tokens from major Chromium and Firefox-based browsers by abusing App‑Bound Encryption via the IElevator COM interface and DLL injection (Early Bird APC). It supports Chrome, Edge, Brave, Opera-family browsers and Firefox, outputs structured JSON for red-team use, and includes operational evasion techniques, presenting a high-risk capability for lateral movement and cloud account takeover if misused.