id: wp-yoast-user-enumeration

info:
  name: WordPress Yoast SEO Plugin - User Enumeration
  author: FLX
  severity: info
  reference:
    - https://developer.yoast.com/features/xml-sitemaps/functional-specification/
  classification:
    cpe: cpe:2.3:a:yoast:yoast_seo:*:*:*:*:wordpress:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: yoast
    product: yoast_seo
    google-query: inurl:"/author-sitemap.xml"
  tags: wp,wp-plugin,wordpress,username,disclosure,vuln

http:
  - raw:
      - |
        @timeout: 15s
        GET /author-sitemap.xml HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<?xml"
          - "<lastmod>"
          - "<loc>"
        condition: and

      - type: word
        part: header
        words:
          - "application/xml"
          - "text/xml"

      - type: status
        status:
          - 200
# digest: 4a0a004730450220724502dedf948b9c38d8639be58d65b6561e890e536e58c1cc99c71aa1bce2b6022100e988ad90b3f1631310607bd0832a7fb9999d098c757f05a9e5ea5ce4fa326267:922c64590222798bb761d5b6d8e72950