CVE-2023-28121

WooCommerce Payments < 5.6.2 - 未认证权限提升 [ 批量添加管理员用户 ]

使用方法

此脚本使用 Python3。安装依赖：pip install -r requirements.txt

参考

https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072

https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know

https://github.com/rapid7/metasploit-framework/issues/18159

https://github.com/killvxk/POCS/blob/c22d5834686fcbd8ed21bf4de965447962d0ecc0/CVE-2023-28121#L4

https://github.com/gbrsh/CVE-2023-28121