nuclei-templates/http/vulnerabilities/wordpress/wp-mstore-plugin-listing.yaml

33 lines
945 B
YAML

id: wp-mstore-plugin-listing
info:
name: Wordpress Plugin MStore API
author: pussycat0x
severity: low
description: Searches for sensitive directories present in the mstore-api plugin.
classification:
cpe: cpe:2.3:a:inspireui:mstore_api:*:*:*:*:wordpress:*:*:*
metadata:
max-request: 1
vendor: inspireui
product: mstore_api
google-query: inurl:/wp-content/plugins/mstore-api/
tags: wordpress,listing,wp-plugin
http:
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/mstore-api/"
matchers-condition: and
matchers:
- type: word
words:
- "Index of"
- "/wp-content/plugins/mstore-api"
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022100f30a737d3328a04aa6c198ff3c783680217e699331f4bc17547a2a98eb94e190022055819f887a866492915fd04e222dfe0d82846dfa192b51bc8cfeebedc019c239:922c64590222798bb761d5b6d8e72950