wordpress-affiliatewp-log: WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure

日期: 2025-08-01 | 影响软件: wordpress-affiliatewp-log | POC: 已公开

漏洞描述

Exposed debug log in AffiliateWP Wordpress Plugin

PoC代码[已公开]

id: wordpress-affiliatewp-log

info:
  name: WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure
  author: dhiyaneshDK
  severity: low
  description: Exposed debug log in AffiliateWP Wordpress Plugin
  metadata:
    max-request: 1
  tags: wordpress,log,plugin,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/wp-content/uploads/affwp-debug.log'

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'Referral could not be retrieved'
          - 'Affiliate CSV'

      - type: word
        words:
          - 'text/plain'
        part: header

      - type: status
        status:
          - 200
# digest: 4a0a004730450220495c4c7576c578b12a44dca3eaff6663d6ba2a01298e5f8a47381189d6619cab022100d02003a8a316cd3d6ca21502e8dbff5ed3b827deae8f014579a94fff123b6c83:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wordpress-affiliatewp-log.yaml

相关漏洞推荐