CVE-2023-5561
MEDIUM NUCLEIWordPress 4.7-4.7.26 - Unauthenticated Email Address Disclosure via REST API Oracle Attack
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2023-5561. PoCs published by pog007, rootxsushant, dthkhang. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2023-5561, an information leakage vulnerability in WordPress REST API, allowing unauthenticated attackers to discern user email addresses via an Oracle-style attack. The script brute-forces email domains and IDs by leveraging the API's improper search field restrictions.
Description
WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack
Exploits (3)
This PoC exploits CVE-2023-5561, an information leakage vulnerability in WordPress REST API, allowing unauthenticated attackers to discern user email addresses via an Oracle-style attack. The script brute-forces email domains and IDs by leveraging the API's improper search field restrictions.
This PoC exploits CVE-2023-5561, a WordPress REST API vulnerability, to brute-force user email addresses by leveraging the search parameter in the /wp-json/wp/v2/users endpoint. It includes a 10-second delay between requests to avoid detection.
This PoC exploits CVE-2023-5561 to enumerate WordPress user email addresses via the `/wp-json/wp/v2/users` API endpoint by brute-forcing domain names. It uses multiprocessing to efficiently test possible email combinations.
Nuclei Templates (1)
cpe:"cpe:2.3:a:wordpress:wordpress" || http.component:"wordpress"
body="oembed" && body="wp-"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N