wp-mailchimp-log-exposure: WordPress Mailchimp 4 Debug Log Exposure

日期: 2025-08-01 | 影响软件: WordPress Mailchimp | POC: 已公开

漏洞描述

Searches for Mailchimp log exposure by attempting to query the debug log endpoint on wp-content

PoC代码[已公开]

id: wp-mailchimp-log-exposure

info:
  name: WordPress Mailchimp 4 Debug Log Exposure
  author: aashiq
  severity: medium
  description: Searches for Mailchimp log exposure by attempting to query the debug log endpoint on wp-content
  metadata:
    max-request: 1
  tags: logs,wordpress,exposure,mailchimp,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/uploads/mc4wp-debug.log"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "WARNING: Form"

      - type: word
        words:
          - 'text/plain'
        part: header
# digest: 4a0a00473045022062316f83b8b7b38a89e404a56609984fa5ca18a55b63f28e21ac065a70314f160221008cf4c841ba79a2cee3ab359654a22faca2f7266ddb51d239ada46d6607d38b4d:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-mailchimp-log-exposure.yaml

相关漏洞推荐