id: easy-wp-smtp-listing

info:
  name: SMTP WP Plugin Directory listing enabled
  author: PR3R00T
  severity: high
  reference: https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/
  tags: wordpress,wp-plugin

requests:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/easy-wp-smtp/"
    matchers:
      - type: word
        words:
          - "debug"
          - "log"
          - "Index of"
        condition: and