CVE-2023-5561 PoC — WordPress plugin Popup Builder 信息泄露漏洞

Source

Associated Vulnerability

Description

Updated POC for Unauth Post Author Email Disclosures WordPress CVE-2023-5561

Readme

# CVE-2023-5561-POC-Updated

This repository contains a modified version of the original Proof-of-Concept (PoC) for CVE-2023-5561. The original PoC, which can be found <a href=https://github.com/pog007/CVE-2023-5561-PoC>here</a>, sends a high volume of requests in parallel, which may trigger Web Application Firewalls (WAFs) or cause the server to block the connection due to excessive traffic.

# Modification

- Added a 10-second delay between each request in the bruteforce_search function using time.sleep(10). This helps prevent the PoC from overwhelming the target server.
- The core functionality of the exploit remains unchanged, ensuring the PoC still works effectively while reducing the likelihood of detection and blocking.

# Usage

``` python3 poc.py <target site root url> ```

This version is useful for conducting responsible security assessments while minimizing the risk of being blocked due to aggressive request patterns.

File Snapshot

 [4.0K]  /data/pocs/379a126c1f0efbe051fdb7e455f30ad60739e97a
├── [2.5K]  poc.py
└── [ 944]  README.md

0 directories, 2 files

Remarks