CVE-2023-5561 PoC — WordPress plugin Popup Builder 信息泄露漏洞

Description

Updated POC for Unauth Post Author Email Disclosures WordPress CVE-2023-5561

介绍

# CVE-2023-5561-POC-Updated

This repository contains a modified version of the original Proof-of-Concept (PoC) for CVE-2023-5561. The original PoC, which can be found <a href=https://github.com/pog007/CVE-2023-5561-PoC>here</a>, sends a high volume of requests in parallel, which may trigger Web Application Firewalls (WAFs) or cause the server to block the connection due to excessive traffic.

# Modification

- Added a 10-second delay between each request in the bruteforce_search function using time.sleep(10). This helps prevent the PoC from overwhelming the target server.
- The core functionality of the exploit remains unchanged, ensuring the PoC still works effectively while reducing the likelihood of detection and blocking.

# Usage

``` python3 poc.py <target site root url> ```

This version is useful for conducting responsible security assessments while minimizing the risk of being blocked due to aggressive request patterns.

文件快照

备注