nuclei-templates/http/vulnerabilities/wordpress/wp-email-subscribers-listin...

31 lines
664 B
YAML

id: wp-email-subscribers-listing
info:
name: WordPress Plugin Email Subscribers Listing
author: pussycat0x
severity: low
description: Searches for sensitive directories present in the email-subscribers plugin.
reference:
- https://www.exploit-db.com/ghdb/6428
tags: wordpress,listing,plugin,edb
metadata:
max-request: 1
http:
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/email-subscribers"
matchers-condition: and
matchers:
- type: word
words:
- "Index of"
- "wp-content/plugins/email-subscribers"
condition: and
- type: status
status:
- 200