admin/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-05-08 19:56:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add /wp-json/wp/v2/users

Browse Source 
Add /wp-json/wp/v2/users WP REST API endpoint which exposes sensitive information - list of all WP users, which could be used for brute-force attacks.
This commit is contained in:
Alexander Bridges 2018-10-31 23:27:00 +02:00 committed by GitHub
parent dbfa5e2b1e
commit a53dae2a76
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Discovery/Web-Content/quickhits.txt
View File

@ -2330,6 +2330,7 @@
/wp-content/plugins/disqus-comment-system/disqus.php
/wp-content/plugins/google-sitemap-generator/sitemap-core.php
/wp-content/uploads/
/wp-json/wp/v2/users
/wp-register.php
/wp.php
/wp.rar/