User Profile Builder <= 3.11.7 - 未经身份验证的媒体文件上传
User Profile Builder WordPress插件在3.11.8版本之前缺乏适当的授权，允许未经身份验证的用户通过WP的异步上传功能上传媒体文件。
usage: CVE-2024-6366.py [-h] -u URL
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation,
allowing unauthenticated users to upload media files via the async upload functionality of WP.
options:
-h, --help show this help message and exit
-u URL, --url URL The target URL (e.g., http://example.com)
Extracted URL from the response:
http:\/\/192.168.100.74:888\/wordpress\/wp-content\/uploads\/2025\/02\/Nxploit-8.png
此脚本仅供教育目的和授权安全评估使用。滥用此脚本可能导致法律后果。在任何系统上测试前，请务必获得适当授权。