Delete http/misconfiguration/wordpress/wp-safe-svg-fpd.yaml

This commit is contained in:
Ritik Chaddha
2025-12-17 16:19:29 +05:30
committed by GitHub
parent 73ce2d5326
commit e2991e705c

View File

@@ -1,41 +0,0 @@
id: wp-safe-svg-fpd
info:
name: WordPress Plugin Safe SVG - Full Path Disclosure
author: ritikchaddha
severity: low
description: |
WordPress Safe SVG plugin is vulnerable to full path disclosure via direct access to plugin files.
reference:
- https://wordpress.org/plugins/safe-svg/
metadata:
verified: true
max-request: 3
vendor: developer
product: safe-svg
framework: wordpress
fofa-query: body="/wp-content/plugins/safe-svg/"
tags: wp,wordpress,wp-plugin,fpd,safe-svg,exposure
http:
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/safe-svg/includes/class-safe-svg.php"
- "{{BaseURL}}/wp-content/plugins/safe-svg/lib/vendor/enshrined/svg-sanitize/src/Sanitizer.php"
- "{{BaseURL}}/wp-content/plugins/safe-svg/lib/safe-svg-tags.php"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Fatal error"
- "safe-svg"
- "Uncaught Error:"
condition: and
- type: status
status:
- 200