CVE-2025-5287 PoC — WordPress plugin Likes and Dislikes Plugin SQL注入漏洞

Description

Wordpress likes and dislikes add-on - SQL Injection

介绍

**Description:**

It is an exploit code that works for multiple urls and multi thread for Unauth Sql Injection on Wp plugin with CVE-2025-5287


**Example usage:**

usage: CVE-2025-5287.py [-h] --file FILE [--fudge FUDGE] [--timeout TIMEOUT] [--threads THREADS] [--proxy PROXY]

Time-Based SQLi Checker (Clean, Threaded, Proxy-Support)

**Optional arguments:**

 **-h, --help**        show this help message and exit

  **--file FILE**       File with base URLs (e.g. http://example.com)
  
  **--fudge FUDGE**    Extra time allowance for delay detection
  
  **--timeout TIMEOUT**  Request timeout in seconds
  
  **--threads THREADS**  Number of concurrent threads
  
  **--proxy PROXY**      Proxy to use (e.g. 5.5.5.5:8080)


  

文件快照

备注