Fix false negative wp-links-opml.yaml

This commit is contained in:
Roberto Nunes
2026-01-30 07:47:13 +09:00
committed by GitHub
parent c962cea33a
commit 3f5351e08f

View File

@@ -5,7 +5,7 @@ info:
author: princechaddha
severity: info
description: |
WordPress wp-links-opml.php file is publicly accessible and exposes the WordPress version in the generator tag.
WordPress wp-links-opml.php file was publicly accessible and expossed the WordPress version in the generator tag.
reference:
- https://www.acunetix.com/vulnerabilities/web/wordpress-version-disclosed/
- https://wordpress.org/
@@ -31,7 +31,9 @@ http:
- type: word
part: body
words:
- "<generator>https://wordpress.org/?v="
- "generator="
- "WordPress/"
condition: and
- type: word
part: header
@@ -47,4 +49,4 @@ http:
name: version
group: 1
regex:
- '<generator>https://wordpress\.org/\?v=([0-9.]+)</generator>'
- '(?i)generator="?WordPress/([0-9.]+)"?'