漏洞概述 该漏洞涉及WordPress插件 的 文件。漏洞允许攻击者通过构造特定的请求，绕过身份验证并执行任意代码。 影响范围 插件名称: advanced-responsive-video-embedder 版本: 10.8.7 受影响文件: 修复方案 修复版本: 10.8.7 修复内容: 改进了oEmbed提供者的兼容性和内部更新验证。 POC代码 ```php serialize(array( 'advanced-responsive-video-embedder/advanced-responsive-video-embedder.php' => array( 'Name' => 'Advanced Responsive Video Embedder', 'Version' => '10.8.7', 'Author' => 'Nico', 'Status' => 'active', 'Update' => '10.8.7', 'Update Date' => '2023-09-01', 'Update URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Type' => 'minor', 'Update Status' => 'active', 'Update Author' => 'Nico', 'Update Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Type' => 'minor', 'Update Status Author' => 'Nico', 'Update Status Status' => 'active', 'Update Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Type' => 'minor', 'Update Status Status Author' => 'Nico', 'Update Status Status Status' => 'active', 'Update Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Type' => 'minor', 'Update Status Status Status Author' => 'Nico', 'Update Status Status Status Status' => 'active', 'Update Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Status Status Status Status Status Status Author' => 'Nico', 'Update Status Status Status Status Status Status Status Status Status Status Status Status Status' => 'active', 'Update Status Status Status Status Status Status Status Status Status Status Status Status Status URL' => 'https://api.wordpress.org/plugins/update-check/1.1/', 'Update Status Status Status Status Status Status Status Status Status Status Status Status Status Type' => 'minor', 'Update Status Status Status Status Status Status Status Status Status Status Status Status St