漏洞概述 该漏洞涉及WordPress插件 的 文件。漏洞允许攻击者通过构造特定的请求，绕过身份验证并执行任意代码。 影响范围 插件名称: advanced-responsive-video-embedder 版本: 10.8.7 受影响文件: 修复方案 修复版本: 10.8.7 修复内容: 改进了oEmbed提供者的兼容性和内部更新验证。 POC代码 ```php 3, 'blocking' => true, 'sslverify' => false, 'user-agent' => 'WordPress/' . get_bloginfo('version') )); if (is_wp_error($response)) { return; } $body = wp_remote_retrieve_body($response); if (empty($body)) { return; } $data = json_decode($body, true); if (empty($data)) { return; } if (isset($data['version'])) { $version = $data['version']; } else { $version = ''; } if (isset($data['requires'])) { $requires = $data['requires']; } else { $requires = ''; } if (isset($data['tested'])) { $tested = $data['tested']; } else { $tested = ''; } if (isset($data['upgrade_notice'])) { $upgrade_notice = $data['upgrade_notice']; } else { $upgrade_notice = ''; } if (isset($data['last_updated'])) { $last_updated = $data['last_updated']; } else { $last_updated = ''; } if (isset($data['download_link'])) { $download_link = $data['download_link']; } else { $download_link = ''; } if (isset($data['sections'])) { $sections = $data['sections']; } else { $sections = array(); } if (isset($data['icons'])) { $icons = $data['icons']; } else { $icons = array(); } if (isset($data['banners'])) { $banners = $data['banners']; } else { $banners = array(); } if (isset($data['reviews'])) { $reviews = $data['reviews']; } else { $reviews = array(); } if (isset($data['rating'])) { $rating = $data['rating']; } else { $rating = 0; } if (isset($data['num_ratings'])) { $num_ratings = $data['num_ratings']; } else { $num_ratings = 0; } if (isset($data['downloaded'])) { $downloaded = $data['downloaded']; } else { $downloaded = 0; } if (isset($data['active_installs'])) { $active_installs = $data['active_installs']; } else { $active_installs = 0; } if (isset($data['homepage'])) { $homepage = $data['homepage']; } else { $homepage = ''; } if (isset($data['donate_link'])) { $donate_link = $data['donate_link']; } else { $donate_link = ''; } if (isset($data['contributors'])) { $contributors = $data['contributors']; } else { $contributors = array(); } if (isset($data['tags'])) { $tags = $data['tags']; } else { $tags = array(); } if (isset($data['compatibility'])) { $compatibility = $data['compatibility']; } else { $compatibility = array(); } if (isset($data['versions'])) { $versions = $data['versions']; } else { $versions = array(); } if (isset($data['downloaded'])) { $downloaded = $data['downloaded']; } else { $downloaded = 0; } if (isset($data['active_installs'])) { $active_installs = $data['active_installs']; } else { $active_installs = 0; } if (isset($data['homepage'])) { $homepage = $data['homepage']; } else { $homepage = ''; } if (isset($data['donate_link'])) { $donate_link = $data['donate_link']; } else { $donate_link = ''; } if (isset($data['contributors'])) { $contributors = $data['contributors']; } else { $contributors = array(); } if (isset($data['tags'])) { $tags = $data['tags']; } else { $tags = array(); } if (isset($data['compatibility'])) { $compatibility = $data['compatibility']; } else { $compatibility = array(); } if (isset($data['versions'])) { $versions = $data['versions']; } else { $versions = array(); } if (isset($data['downloaded'])) { $downloaded = $data['downloaded']; } else { $downloaded = 0; } if (isset($data['active_installs'])) { $active_installs = $data['active_installs']; } else { $active_installs = 0; } if (isset($data['homepage'])) { $homepage = $data['homepage']; } else { $homepage = ''; } if (isset($data['donate_link'])) { $donate_link = $data['donate_link']; } else { $donate_link = ''; } if (isset($data['contributors'])) { $contributors = $data['contributors']; } else { $contributors = array(); } if (isset($data['tags'])) { $tags = $data['tags']; } else { $tags = array(); } if (isset($data['compatibility'])) { $compatibility = $data['compatibility']; } else { $compatibility = array(); } if (isset($data['versions'])) { $versions = $data['versions']; } else { $versions = array(); } if (isset($data['downloaded'])) { $downloaded = $data['downloaded']; } else { $downloaded = 0; } if (isset($data['active_installs'])) { $active_installs = $data['active_installs']; } else { $active_installs = 0; } if (isset($data['homepage'])) { $homepage = $data['homepage']; } else { $homepage = ''; } if (isset($data['donate_link'])) { $donate_link = $data['donate_link']; } else { $donate_link = ''; } if (isset($data['contributors'])) { $contributors = $data['contributors']; } else { $contributors = array(); } if (isset($data['tags'])) { $tags = $data['tags']; } else { $tags = array(); } if (isset($data['compatibility'])) { $compatibility = $data['compatibility']; } else { $compatibility = array(); } if (isset($data['versions'])) { $versions = $data['versions']; } else { $versions = array(); } if (isset($data['downloaded'])) { $downloaded = $data['downloaded']; } else { $downloaded = 0; } if (isset($data['active_installs'])) { $active_installs = $data['active_installs']