nuclei-templates/vulnerabilities/wordpress/wordpress-user-enumeration....

id: wordpress-user-enumeration

info:
  name: Wordpress user enumeration
  author: Manas_Harsh
  severity: info

requests:
  - method: GET
    path:
      - "{{BaseURL}}/wp-json/wp/v2/users/"
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - avatar_urls
Fix small typo 2020-07-31 20:18:26 +00:00			`id: wordpress-user-enumeration`
Wp-user If this endpoint is misconfigured, we can enumerate Wordpress admins and their userID. 2020-06-29 20:19:40 +00:00
			`info:`
Update and rename Wp-user to wordpress-user-enumaration.yaml 2020-06-30 05:00:57 +00:00			`name: Wordpress user enumeration`
Wp-user If this endpoint is misconfigured, we can enumerate Wordpress admins and their userID. 2020-06-29 20:19:40 +00:00			`author: Manas_Harsh`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
Wp-user If this endpoint is misconfigured, we can enumerate Wordpress admins and their userID. 2020-06-29 20:19:40 +00:00
			`requests:`
			`- method: GET`
			`path:`
Update and rename Wp-user to wordpress-user-enumaration.yaml 2020-06-30 05:00:57 +00:00			`- "{{BaseURL}}/wp-json/wp/v2/users/"`
Fixed default condition OR to AND in false-positives 2020-07-08 11:38:57 +00:00			`matchers-condition: and`
Wp-user If this endpoint is misconfigured, we can enumerate Wordpress admins and their userID. 2020-06-29 20:19:40 +00:00			`matchers:`
			`- type: status`
			`status:`
			`- 200`
Update and rename Wp-user to wordpress-user-enumaration.yaml 2020-06-30 05:00:57 +00:00			`- type: word`
			`words:`
			`- avatar_urls`