Comments (8)
Yep, will have a look.
We are a little behind on plugins vulns (I think 4-5), my fault.
I'll be back full time on this next week.
from wpscan.
Just a quick note: if you have some root source of advisories, like exploit db or packet storm or random-corp-advisory-page, let me know so I can add them to our notification bot.
The closer to an original source the better!
from wpscan.
Why this issue is still open after five moths?
from wpscan.
@fgeek Because we are working on a new db and we are keeping this issue open as a remainder.
from wpscan.
@firefart still something TODO in this issue?
from wpscan.
Sources, with pagination
OSVDB: http://osvdb.org/search?search[text_type]=titles&search[vuln_title]=wordpress&page=1
Exploit-DB: http://www.exploit-db.com/search/?action=search&filter_description=wordpress&filter_page=1
CVE: http://web.nvd.nist.gov/view/vuln/search-results?page_num=0&cves=true&query=wordpress
Packet Storm: http://packetstormsecurity.com/search/files/page1/?q=wordpress
Secunia: http://secunia.com/community/advisories/search/?search=wordpress&page=0
IBM: http://search.iss.net/Search.do?keyword=wordpress&searchType=keywd&start=0&sort=date%3aD%3aS%3ad1
RSS feeds:
Packet Storm RSS-feed: http://rss.packetstormsecurity.com/search/files/page1/?q=wordpress
http://cxsecurity.com/cverss/2324/3929/wordpress/
Other sources:
Twitter WPvulns: http://twitter.com/wpvulns
CXSECURITY: http://cxsecurity.com/
Leetday: http://1337day.com/webapps
And to broadcast WPScan updates to the world:
https://github.com/wpscanteam/wpscan/commits/master.atom
from wpscan.
Another one for exploits: http://www.mondounix.com/category/wordpress/wordpress_security/
from wpscan.
Closing as Work in Progress.
from wpscan.
Related Issues (20)
- Cannot create account HOT 3
- I can't see any register form at website. HOT 4
- Scan Aborted: The number of themes detected reached the threshold of 20 which might indicate False Positive. It would be recommended to use the --exclude-content-based option to ignore the bad responses. HOT 1
- Prompt "Do you want to update now?" not printed
- JSON lines
- request time out or no response ERROR
- WordPress v6.4.3 wrongly detected as v6.4.2 resulting in a false positive alert HOT 2
- Error: Server error, try reducing the number of threads. WPSCAN
- Wpscan not following redirect when I set format to json
- False Negative HOT 4
- Using proxy to access target without internet HOT 1
- wpscan --update renders error after upgrade from Ubuntu 20.04 to Ubuntu 22.04. /usr/bin/ruby2.7: bad interpreter: No such file or directory HOT 2
- cannot load such file -- json HOT 5
- WP version detection from query parameters of upgrade.php etc.
- security
- Scan Aborted: Unable to get https://data.wpscan.org/metadata.json.sha512 (SSL peer certificate or SSH remote key was not OK) HOT 4
- марик HOT 1
- Add an option to set url for get plugins list from custom wordpress api
- Failed to build gem native extension HOT 1
- Cannot download WPScan WordPress Vulnerability Database exports as an Enterprise customer
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wpscan.