[HFZhyonn]

Hello everyone I have found the admin page of a site: http://www.surecatch.com/wp-admin/login.php
I also have the password. Being quite new to website hacking (I know SQLi and a little bit of XSS) I don't know what damage a hacker could do to this site. Maybe a backdoor or shell? Any recommendations would help as I am going to be emailing the owner of this site as to why this is urgent.

[SlimJimTheHunter]

if you have the password then there are a multitude of ways that a shell can be uploaded via wordpress, once that is done the site can be backdoored, malicious software installed on the site as well as potentially escalating the attack by rooting the server, thus putting a variety of other sites at risk.

[Frosteh]

Some wordpress sites allow you to enumerate the users, so if you have just a password you can use that attack to find what username it goes with. As long as they aren't blocking by IP address you can then log into the CMS. From there it's fairly trivial to upload a shell to the site and get direct access, once you've done that you just need to elevate your privileges which you can do by finding the OS version and then searching an exploit database for known local privilege escalation exploits.

[LaughingGas]

Hello everyone I have found the admin page of a site:
I also have the password. Being quite new to website hacking (I know SQLi and a little bit of XSS) I don't know what damage a hacker could do to this site. Maybe a backdoor or shell? Any recommendations would help as I am going to be emailing the owner of this site as to why this is urgent.

Using the admin panel a hacker could upload his shell to the site, manipulate all the files, and do other stuff depending on what the admin panel allows.

[V3rm_Dank]

Screw the site up and upload a bunch of nude pics

[Sheeple]

Screw the site up and upload a bunch of nude pics

What are you 12?