wordpress-storefront-fpd: WordPress Storefront Theme - Full Path Disclosure

id: wordpress-storefront-fpd

info:
  name: WordPress Storefront Theme - Full Path Disclosure
  author: pussycat0x
  severity: low
  description: |
    The Storefront theme for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path that could aid other attacks when combined with another vulnerability.
  reference:
    - https://wordpress.org/themes/storefront/
    - https://woocommerce.com/products/storefront/
  metadata:
    max-request: 3
    vendor: wordpress
    product: storefront
    fofa-query: body="/wp-content/themes/storefront/"
  tags: wordpress,wp,wp-theme,fpd,disclosure,storefront,woocommerce,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/themes/storefront/functions.php"
      - "{{BaseURL}}/wp-content/themes/storefront/header.php"
      - "{{BaseURL}}/wp-content/themes/storefront/footer.php"

    stop-at-first-match: true

    matchers:
      - type: dsl
        dsl:
          - 'contains_all(body, "Fatal error", "Uncaught Error:") || contains_all(body, "Warning:", "failed to open stream")'
          - 'status_code == 200 || status_code == 500'
          - 'contains(body, "/storefront")'
        condition: and
# digest: 490a00463044022031d4c07b4421fb52ecca7b9a721d0c1dc76c4cf79bd29f2d790c9dc7f260a4ee022042f2891ca66ca85eed82e51ee0f0557255d07361618a287ce15ff660774db433:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.