nuclei-templates/http/vulnerabilities/wordpress/wp-enabled-registration.yaml

id: wp-enabled-registration

info:
  name: WordPress user registration enabled
  author: Ratnadip Gajbhiye
  severity: info
  tags: wordpress

http:
  - method: GET
    path:
      - '{{BaseURL}}/wp-login.php?action=register'

    matchers-condition: and
    matchers:
      - type: word
        words:
          - Register For This Site
          - E-mail
        condition: and
        part: body

      - type: status
        status:
          - 200
updating template 2021-01-21 14:47:20 +00:00			`id: wp-enabled-registration`
Create WordPress-user-registration-enabled.yaml Description : Your WordPress site is currently configured so that anyone can register as a user. If you are not using this functionality, it's recommended to disable user registration as it caused some security issues in the past and is increasing the attack surface. 2021-01-20 10:22:55 +00:00
			`info:`
			`name: WordPress user registration enabled`
			`author: Ratnadip Gajbhiye`
updating template 2021-01-21 14:47:20 +00:00			`severity: info`
Added tags to wordpress templates. 2021-02-05 09:23:55 +00:00			`tags: wordpress`
Create WordPress-user-registration-enabled.yaml Description : Your WordPress site is currently configured so that anyone can register as a user. If you are not using this functionality, it's recommended to disable user registration as it caused some security issues in the past and is increasing the attack surface. 2021-01-20 10:22:55 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create WordPress-user-registration-enabled.yaml Description : Your WordPress site is currently configured so that anyone can register as a user. If you are not using this functionality, it's recommended to disable user registration as it caused some security issues in the past and is increasing the attack surface. 2021-01-20 10:22:55 +00:00			`- method: GET`
			`path:`
			`- '{{BaseURL}}/wp-login.php?action=register'`
updating template 2021-01-21 14:47:20 +00:00
Create WordPress-user-registration-enabled.yaml Description : Your WordPress site is currently configured so that anyone can register as a user. If you are not using this functionality, it's recommended to disable user registration as it caused some security issues in the past and is increasing the attack surface. 2021-01-20 10:22:55 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
			`- Register For This Site`
			`- E-mail`
fixing typos 2021-03-10 14:03:49 +00:00			`condition: and`
Create WordPress-user-registration-enabled.yaml Description : Your WordPress site is currently configured so that anyone can register as a user. If you are not using this functionality, it's recommended to disable user registration as it caused some security issues in the past and is increasing the attack surface. 2021-01-20 10:22:55 +00:00			`part: body`
updating template 2021-01-21 14:47:20 +00:00
Create WordPress-user-registration-enabled.yaml Description : Your WordPress site is currently configured so that anyone can register as a user. If you are not using this functionality, it's recommended to disable user registration as it caused some security issues in the past and is increasing the attack surface. 2021-01-20 10:22:55 +00:00			`- type: status`
			`status:`
			`- 200`