How to craft an XSS payload to create an admin user in Wordpress

What I'll go through in this post is exactly how to capitalize on a particular (old) Wordpress plugin vulnerability to deliver a persistent XSS injection (not logged into Wordpress) that will later be executed by someone logged into Wordpress with higher privileges, such as an administrator.

XSS Injection Campaign Exploits WordPress AMP Plugin

XSS: A Gateway to Command and Control, by Mawee

XSS to RCE – using WordPress as an example

TrustedSec Tricks for Weaponizing XSS

WordPress XSS Attack (Cross Site Scripting) - How To Prevent?

XSS (Cross Site Scripting) Part 1 – What is XSS? – simpleisbest.co.uk

TrustedSec Tricks for Weaponizing XSS

Part 4 - OWASP Top 10 Vulnerabilities Affecting WordPress Applications

WordPress (Core) Stored XSS Vulnerability: An Analysis

A Pentester's Guide to Cross-Site Scripting (XSS)

Stored XSS (Cross Site Scripting) vulnerability in page title

Reflected XSS in WordPress Plugin Admin Pages

What Is Cross-Site Scripting (XSS)? + WordPress XSS Example

WordpreXSS Exploitation » Rainbow and Unicorn