wp-prostore-open-redirect: WordPress ProStore <1.1.3 - Open Redirect

id: wp-prostore-open-redirect

info:
  name: WordPress ProStore <1.1.3 - Open Redirect
  author: 0x_Akoko
  severity: low
  description: WordPress ProStore theme before 1.1.3 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
  reference:
    - https://wpscan.com/vulnerability/2e0f8b7f-96eb-443c-a553-550e42ec67dc
  metadata:
    max-request: 1
  tags: wordpress,wp-theme,redirect,wpscan,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/themes/prostore/go.php?https://interact.sh/"

    matchers:
      - type: regex
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
        part: header
# digest: 4a0a004730450220445da51ea0d421d6d71a565abbcc9e79b43941e5abc10adfed5d3e97e2a45f9a022100a1ba3aff4bdb8a49774ee47668b691fcb3c8542ab092c7459a8664e3c5fb5a8a:922c64590222798bb761d5b6d8e72950