How to craft an XSS payload to create an admin user in Wordpress

What I'll go through in this post is exactly how to capitalize on a particular (old) Wordpress plugin vulnerability to deliver a persistent XSS injection (not logged into Wordpress) that will later be executed by someone logged into Wordpress with higher privileges, such as an administrator.

TrustedSec Tricks for Weaponizing XSS

XSS Injection Campaign Exploits WordPress AMP Plugin

WordPress 5.1 CSRF to Remote Code Execution

10 Practical scenarios for XSS attacks

Magento 2.3.1: Unauthenticated Stored XSS to RCE

HTTP Request Smuggling – Reflected XSS via Headers – Scomurr's Blog

XSS to RCE – using WordPress as an example

Understanding Blind XSS for Bug Bounty Hunting - GeeksforGeeks

WordPress XSS Protection: Safeguard Your Site In 2023

Technical write-up on CVE-2022-2753