id: wp-mailchimp-log-exposure

info:
  name: WordPress Mailchimp 4 Debug Log Exposure
  author: aashiq
  severity: medium
  description: Searches for Mailchimp log exposure by attempting to query the debug log endpoint on wp-content
  metadata:
    max-request: 1
  tags: logs,wordpress,exposure,mailchimp

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/uploads/mc4wp-debug.log"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "WARNING: Form"

      - type: word
        words:
          - 'text/plain'
        part: header

# digest: 4a0a0047304502207a73f6f908bb56f5a3a088a7f6753c16f9292a6d9b16b3a926114f584057f95e022100918df7f42abc3c0d9e284b16f06e428ad617fd53e41e17d320949a8de812f3c9:922c64590222798bb761d5b6d8e72950