CVE-2026-7567-POC

描述 本仓库包含 CVE-2026-7567 的概念验证（PoC）。该漏洞影响 Wordpress 临时登录插件 = 1.0.0，允许攻击者绕过身份验证并接管账户。我仅出于教育和研究目的开发此漏洞利用程序/PoC。 使用方法 您只需使用以下单条命令即可运行： root@kitploit: python exploit.py CVE-2026-7567 NVD...

CVE-2026-7567 Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover

The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybelogintemporaryuser function, which fails to verify that the 'temp-login-token' GET parameter is a scalar string before...