CVE-2023-5561 PoC — WordPress plugin Popup Builder 信息泄露漏洞

Description

CVE-2023-5561-PoC

介绍

# PoC CVE-2023-5561 - WordPress User Email Disclosure

## Description
This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the `/wp-json/wp/v2/users` API endpoint.

## Requirements
- Python 3.x
- `requests` library

Install the required library:
```bash
pip install requests
```

## Usage
1. Identify the root URL of the target WordPress site (e.g., `https://target.com`).
2. Run the script with the following syntax:

```bash
python CVE-2023-5561.py <target site root url>
```

Example:
```bash
python CVE-2023-5561.py https://target.com
```

## Result
The script will list found users and attempt to brute-force and reveal the full email address for each user if possible.

## Legal Notice
- This script is for authorized security testing and educational purposes only.
- Do not use it for malicious purposes or against systems you do not have permission to test. 

文件快照

备注