nuclei-templates/vulnerabilities/wordpress/wordpress-user-enumeration....

22 lines
423 B
YAML

id: wordpress-user-enumeration
info:
name: Wordpress user enumeration
author: Manas_Harsh & daffainfo
severity: info
tags: wordpress
requests:
- method: GET
path:
- "{{BaseURL}}/wp-json/wp/v2/users/"
- "{{BaseURL}}/?rest_route=/wp/v2/users/"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- avatar_urls