CVE-2024-12542 PoC — WordPress plugin linkID 安全漏洞

介绍

# CVE-2024-12542-PoC
Missing Authorization to Unauthenticated Sensitive Information Exposure

## Vulnerability Description

The `linkID` plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the `phpinfo` function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited.

## Script Explanation

1. **Disable SSL Verification**: Disables SSL warnings and verification.
2. **Logging Function**: Prints and writes messages to `output.txt`.
3. **Version Check**: Fetches the `readme.txt` file, checks the version. If <= 0.1.2, logs vulnerability and fetches PHP info.
4. **Fetch PHP Info**: Retrieves and saves PHP info to `phpinfo.php`.
5. **Main Function**: Parses URL input, opens `output.txt`, and checks the version.

### Usage:
```
usage: CVE-2024-12542.py [-h] -u URL

Check WordPress plugin version and fetch PHP info.

options:
  -h, --help         show this help message and exit
  -u URL, --url URL  Base URL of the WordPress site

```

文件快照

备注