您可能需要在请求中添加更多标头。
标题可以在Network > Headers > Request Headers of the Developer Tools.中找到（按F12切换它。）

使用了错误的随机数。要提取正确的随机数，请使用以下命令并发布到Media-upload.php。关键是从media-new.php页面提取form _wpnonce。
如果你不从表单参数中提取，那么你最终可能会得到一打其他随机数中的一个。

test = re.search('"multipart_params":.*_wpnonce":"[0-9a-z]+"', r1.text)
nonce = re.search('(?<=_wpnonce":")[0-9a-z]{10}', test.group(0))
nonce = nonce.group(0)

字符串
完整的代码是

#!/usr/bin/python3
import sys, requests, re

f = 'test.txt'

user='user'
password='password'
url1='https://example.com/wp-login.php'
redirecturl='https://example.com/wp-admin/media-new.php'
url2='https://example.com/wp-admin/async-upload.php'

headerauth= {
        'Cookie':'wordpress_test_cookie=WP Cookie check; ROUTEID=.1',
        'Host':'example.com',
        'Content-Type': 'application/x-www-form-urlencoded'
        }
dataauth = {
        'log':user,
        'pwd':password,
        'wp-submit':'Log In',
        'redirect_to': redirecturl,
        'testcookie': 1
        }
image = {'async-upload':('test.txt', open(f, "rb"))}
testimage = open(f, "rb")

session1=requests.session()
session1.get(url1)
r1 = session1.post(url1, headers=headerauth, data=dataauth)

test = re.search('"multipart_params":.*_wpnonce":"[0-9a-z]+"', r1.text)
nonce = re.search('(?<=_wpnonce":")[0-9a-z]{10}', test.group(0))
nonce = nonce.group(0)

uploadheaders = {
        'Connection': 'keep-alive',
        'Referer': 'https://example.com/wp-admin/upload.php',
        'Sec-Fetch-Dest': 'empty',
        'Sec-Fetch-Mode': 'cors',
        'Sec-Fetch-Site': 'same-origin'
        }
dataupload = {
        'name': 'test.txt',
        'action': 'upload-attachement',
        '_wpnonce': nonce,
        'wpmf_folder': '0',
        }

r2 = session1.post(url2, data=dataupload, headers=uploadheaders, files=image)

型

在WordPress API v2上通过Python 3脚本测试了多种文件类型后，我们发布了一个要点。它上传到WordPress默认上传目录，当然您可以在其中修改其设置：

WordPress Dashboard > Settings > Media

字符串
该脚本也以安全的方式处理令牌。
希望对你也有用：

### upload.py

import os
import base64
import requests
from credentials import get_wp_access

def upload_file(relative_path, caption, destination):

    # Get the absolute path to the directory containing this script
    project_dir = os.path.dirname(os.path.abspath(__file__))

    # Combine the project directory with the relative path to get the full system path
    file_path = os.path.join(project_dir, relative_path)

    api_url, username, password = get_wp_access(destination)

    credentials = username + ':' + password
    token = base64.b64encode(credentials.encode())
    json_header = {'Authorization': 'Basic ' + token.decode('utf-8')}

    media = {'file': open(file_path, "rb"), 'caption': caption}
    response = requests.post(api_url + "media", headers=json_header, files=media)
    print(response.text)

# Example usage with a path relevant to the project directory
upload_file('relational/path/to/file.pptx', 'Sample caption', 'site_1')

型
在另一个文件中：

### credentials.py

destinations = {
    "site_1": {
        "api_url": "https://example-1.com/wp-json/wp/v2/",
        "username": "wp_username",
        "password": "XXXX XXXX XXXX XXXX XXXX XXXX"
    },
    "site_2": {
        "api_url": "https://example-2.com/wp-json/wp/v2/",
        "username": "wp_username",
        "password": "XXXX XXXX XXXX XXXX XXXX XXXX"
    },
        "site_3": {
        "api_url": "https://example-3.com/wp-json/wp/v2/",
        "username": "wp_username",
        "password": "XXXX XXXX XXXX XXXX XXXX XXXX"
    },
    "site_4": {
        "api_url": "https://example-4.com/wp-json/wp/v2/",
        "username": "wp_username",
        "password": "XXXX XXXX XXXX XXXX XXXX XXXX"
    },
    "site_5": {
        "api_url": "https://example-5.com/wp-json/wp/v2/",
        "username": "wp_username",
        "password": "XXXX XXXX XXXX XXXX XXXX XXXX"
    },
     # More websites if needed...
}

def get_wp_access(destination):
    access_info = destinations.get(destination, {})
    api_url = access_info.get("api_url", "")
    username = access_info.get("username", "")
    password = access_info.get("password", "")
    return api_url, username, password

型
使用这个脚本，你可以有多个WordPress网站的字典，并更新他们都与一个单一的功能。如果你想有一个所有在一个模块，随时合并的脚本在一起。
The Gist on GitHub