wp-members-log-disclosure: WordPress Members Plugin - Debug/Error Log Disclosure

id: wp-members-log-disclosure

info:
  name: WordPress Members Plugin - Debug/Error Log Disclosure
  author: ritikchaddha
  severity: low
  description: |
    The WordPress Members plugin exposes error/debug log files that may contain sensitive information.
  reference:
    - https://wordpress.org/plugins/members/
    - https://pentest-tools.com/vulnerabilities-exploits/wordpress-members-membership-and-user-role-editor-plugin-error-log-disclosure_28354
  metadata:
    max-request: 1
    vendor: wordpress
    product: members
    framework: wordpress
    fofa-query: body="/wp-content/plugins/members"
  tags: wordpress,wp-plugin,members,exposure,logs,vuln

flow: http(1) && http(2)

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true
    matchers:
      - type: word
        part: body
        words:
          - "/members"
        internal: true

  - method: GET
    path:
      - "{{BaseURL}}/wp-content/debug.log"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'regex("[[0-9]{2}-[a-zA-Z]{3}-[0-9]{4} [0-9]{2}:[0-9]{2}:[0-9]{2} [A-Z]{3}] PHP", body)'
          - 'contains_any(body, "PHP Warning:", "PHP Notice:", "Undefined array", "Undefined variable")'
        condition: and
# digest: 4a0a00473045022100d2cf50e44bad0fdb5c42c56a3034ee7d6a60f0fa10d80ea1be4eaa2706820ceb022062561d39486bf5130c5328dda3526d3be0c2fb15058ea6b98f214fab481bdef0:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.