nuclei-templates/http/vulnerabilities/wordpress/wp-yoast-user-enumeration.yaml

45 lines
1.1 KiB
YAML

id: wp-yoast-user-enumeration
info:
name: WordPress Yoast SEO Plugin - User Enumeration
author: FLX
severity: info
reference:
- https://developer.yoast.com/features/xml-sitemaps/functional-specification/
classification:
cpe: cpe:2.3:a:yoast:yoast_seo:*:*:*:*:wordpress:*:*:*
metadata:
verified: true
max-request: 1
vendor: yoast
product: yoast_seo
google-query: inurl:"/author-sitemap.xml"
tags: wp,wp-plugin,wordpress,username,disclosure
http:
- raw:
- |
@timeout: 15s
GET /author-sitemap.xml HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<?xml"
- "<lastmod>"
- "<loc>"
condition: and
- type: word
part: header
words:
- "application/xml"
- "text/xml"
- type: status
status:
- 200
# digest: 490a004630440220376b25892d29a3f47121f79baab520dcc7815ceb44f0f1cd4ddd515eacd3e4d902205151fa2bacaf091199fee93df9fa82fae52c8e5325a473c54aaab786af777890:922c64590222798bb761d5b6d8e72950