Description
CVE-2025-30567 以 WordPress WP01 插件为目标。此漏洞源于不正确的输入验证，这使得攻击者能够纵文件路径。此处提供的 PoC 允许您在受控环境中测试漏洞。了解此漏洞可以帮助开发人员修补其应用程序并保护其系统免受潜在攻击。
WordPress WP01 插件 /wp-admin/admin-ajax.php?action=wp01_generate_zip_archive 文件读取漏洞（CVE-2025-30567）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-30567
https://github.com/Oyst3r1ng/CVE-2025-30567
https://patchstack.com/database/Wordpress/Plugin/wp01/vulnerability/wordpress-wp01-2-6-2-arbitrary-file-download-vulnerability
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp01/wp01-speed-security-seo-consultant-262-authenticated-subscriber-arbitrary-file-download
https://cve.imfht.com/detail/CVE-2025-30567
https://www.cve.org/CVERecord?id=CVE-2025-30567