diff --git a/fuzzing/wordpress-weak-credentials.yaml b/fuzzing/wordpress-weak-credentials.yaml index 0bec5f6f85..bef8711ec9 100644 --- a/fuzzing/wordpress-weak-credentials.yaml +++ b/fuzzing/wordpress-weak-credentials.yaml @@ -1,9 +1,17 @@ id: wordpress-weak-credentials info: - name: WordPress Weak Credentials + name: WordPress - Weak Credentials author: evolutionsec + description: A WordPress passwords file was discovered. + reference: + - https://www.wpwhitesecurity.com/strong-wordpress-passwords-wpscan/ severity: critical + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N + cvss-score: 5.8 + cve-id: + cwe-id: CWE-522 tags: wordpress,default-login,fuzz requests: @@ -34,4 +42,6 @@ requests: - '/wp-admin' - 'wordpress_logged_in' condition: and - part: header \ No newline at end of file + part: header + +# Enhanced by mp on 2022/05/19