Proof of Concept

link

EDIT: It works only in blogs where you can register a user, because you have to know the wp_once value

Happy Hacking😉