idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add /wp-json/wp/v2/users

Browse Source 
Add /wp-json/wp/v2/users WP REST API endpoint which exposes sensitive information - list of all WP users, which could be used for brute-force attacks.
This commit is contained in:
Alexander Bridges
2018-10-31 23:27:00 +02:00
committed by GitHub
parent dbfa5e2b1e
commit a53dae2a76
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
Discovery/Web-Content/quickhits.txt
View File

@@ -2330,6 +2330,7 @@
/wp-content/plugins/disqus-comment-system/disqus.php /wp-content/plugins/disqus-comment-system/disqus.php
/wp-content/plugins/google-sitemap-generator/sitemap-core.php /wp-content/plugins/google-sitemap-generator/sitemap-core.php
/wp-content/uploads/ /wp-content/uploads/
/wp-json/wp/v2/users
/wp-register.php /wp-register.php
/wp.php /wp.php
/wp.rar/ /wp.rar/