ColdBoxEasy is a beginner-friendly Linux box on OffSec PG Play built around a sloppy WordPress setup. Enumeration turns up a hidden directory leaking internal account notes, which hands you the username list on a plate. WPScan cracks the login, and from there the WordPress theme editor gets abused — purely via curl, no browser touch — to drop a...