Page Menu
Home
Phabricator
Search
Configure Global Search
Log In
Files
F41881730
wpscan20240213_after.txt
stefano.cannillo (Stefano Cannillo)
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Authored By
stefano.cannillo
Feb 13 2024, 2:58 PM
2024-02-13 14:58:12 (UTC+0)
Size
9 KB
Referenced Files
None
Subscribers
None
wpscan20240213_after.txt
View Options
_______________________________________________________________
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __ ®
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_|
WordPress Security Scanner by the WPScan Team
Version 3.8.22
Sponsored by Automattic - https://automattic.com/
@_WPScan_, @ethicalhack3r, @erwan_lr, @firefart
_______________________________________________________________
[+] URL: https://www.wikimedia.it/ [51.75.90.142]
[+] Started: Tue Feb 13 04:01:36 2024
Interesting Finding(s):
[+] Headers
| Interesting Entry: Server: Apache/2.4.38 (Debian)
| Found By: Headers (Passive Detection)
| Confidence: 100%
[+] robots.txt found: https://www.wikimedia.it/robots.txt
| Found By: Robots Txt (Aggressive Detection)
| Confidence: 100%
[+] This site has 'Must Use Plugins': https://www.wikimedia.it/wp-content/mu-plugins/
| Found By: Direct Access (Aggressive Detection)
| Confidence: 80%
| Reference: http://codex.wordpress.org/Must_Use_Plugins
[+] The external WP-Cron seems to be enabled: https://www.wikimedia.it/wp-cron.php
| Found By: Direct Access (Aggressive Detection)
| Confidence: 60%
| References:
| - https://www.iplocation.net/defend-wordpress-from-ddos
| - https://github.com/wpscanteam/wpscan/issues/1299
[+] WordPress version 6.4.3 identified (Latest, released on 2024-01-30).
| Found By: Style Etag (Aggressive Detection)
| - https://www.wikimedia.it/wp-admin/load-styles.php, Match: '6.4.3'
| Confirmed By: Query Parameter In Install Page (Aggressive Detection)
| - https://www.wikimedia.it/wp-includes/css/dashicons.min.css?ver=6.4.3
| - https://www.wikimedia.it/wp-includes/css/buttons.min.css?ver=6.4.3
| - https://www.wikimedia.it/wp-admin/css/forms.min.css?ver=6.4.3
| - https://www.wikimedia.it/wp-admin/css/l10n.min.css?ver=6.4.3
| - https://www.wikimedia.it/wp-admin/css/install.min.css?ver=6.4.3
[+] WordPress theme in use: wmi
| Location: https://www.wikimedia.it/wp-content/themes/wmi/
| Style URL: https://www.wikimedia.it/wp-content/themes/wmi/style.css?ver=62b8c5b6802db82d5d7b52206a0ab546
| Style Name: Wikimedia.it
| Style URI: https://emeraldcommunication.com
| Description: Wikimedia theme based on "betheme theme"...
| Author: Emerald Communnication
| Author URI: https://emeraldcommunication.com
|
| Found By: Css Style In Homepage (Passive Detection)
| Confirmed By: Css Style In 404 Page (Passive Detection)
|
| Version: 1.0.1 (80% confidence)
| Found By: Style (Passive Detection)
| - https://www.wikimedia.it/wp-content/themes/wmi/style.css?ver=62b8c5b6802db82d5d7b52206a0ab546, Match: 'Version: 1.0.1'
[+] Enumerating All Plugins (via Passive Methods)
[+] Checking Plugin Versions (via Passive and Aggressive Methods)
[i] Plugin(s) Identified:
[+] addon-elements-for-elementor-page-builder
| Location: https://www.wikimedia.it/wp-content/plugins/addon-elements-for-elementor-page-builder/
| Last Updated: 2024-02-05T06:15:00.000Z
| [!] The version is out of date, the latest version is 1.12.12
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| [!] 1 vulnerability identified:
|
| [!] Title: Elementor Addon Elements < 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
| Fixed in: 1.12.12
| References:
| - https://wpscan.com/vulnerability/4c090a45-2a85-4f59-a1b9-104891032d0f
| - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0834
| - https://www.wordfence.com/threat-intel/vulnerabilities/id/6ebb5654-ba3e-4f18-8720-a6595a771964
|
| Version: 1.12.11 (50% confidence)
| Found By: Readme - ChangeLog Section (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/addon-elements-for-elementor-page-builder/readme.txt
[+] elementor
| Location: https://www.wikimedia.it/wp-content/plugins/elementor/
| Latest Version: 3.19.2 (up to date)
| Last Updated: 2024-02-07T15:41:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 3.19.2 (100% confidence)
| Found By: Query Parameter (Passive Detection)
| - https://www.wikimedia.it/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.19.2
| - https://www.wikimedia.it/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.2
| Confirmed By:
| Readme - Stable Tag (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/elementor/readme.txt
| Readme - ChangeLog Section (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/elementor/readme.txt
[+] essential-addons-for-elementor-lite
| Location: https://www.wikimedia.it/wp-content/plugins/essential-addons-for-elementor-lite/
| Latest Version: 5.9.9 (up to date)
| Last Updated: 2024-02-11T11:58:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 5.9.9 (100% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/essential-addons-for-elementor-lite/readme.txt
| Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/essential-addons-for-elementor-lite/readme.txt
[+] gdpr-cookie-compliance
| Location: https://www.wikimedia.it/wp-content/plugins/gdpr-cookie-compliance/
| Latest Version: 4.13.1 (up to date)
| Last Updated: 2024-01-26T15:04:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 4.13.1 (100% confidence)
| Found By: Query Parameter (Passive Detection)
| - https://www.wikimedia.it/wp-content/plugins/gdpr-cookie-compliance/dist/styles/gdpr-main.css?ver=4.13.1
| - https://www.wikimedia.it/wp-content/plugins/gdpr-cookie-compliance/dist/scripts/main.js?ver=4.13.1
| Confirmed By: Readme - Stable Tag (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/gdpr-cookie-compliance/readme.txt
[+] gravityforms
| Location: https://www.wikimedia.it/wp-content/plugins/gravityforms/
| [!] The version is out of date, the latest version is 2.8.3
|
| Found By: Urls In 404 Page (Passive Detection)
|
| Version: 2.7.12 (90% confidence)
| Found By: Query Parameter (Passive Detection)
| - https://www.wikimedia.it/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.7.12
| - https://www.wikimedia.it/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.7.12
| - https://www.wikimedia.it/wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.7.12
| Confirmed By: Change Log (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/gravityforms/change_log.txt, Match: '### 2.7.12'
[+] smart-slider-3
| Location: https://www.wikimedia.it/wp-content/plugins/smart-slider-3/
| Latest Version: 3.5.1.21 (up to date)
| Last Updated: 2023-11-15T12:46:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
|
| Version: 3.5.1.21 (100% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/smart-slider-3/readme.txt
| Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/smart-slider-3/readme.txt
[+] wiki-embed
| Location: https://www.wikimedia.it/wp-content/plugins/wiki-embed/
| Latest Version: 1.4.6 (up to date)
| Last Updated: 2013-08-13T23:08:00.000Z
|
| Found By: Urls In Homepage (Passive Detection)
| Confirmed By: Urls In 404 Page (Passive Detection)
|
| Version: 1.4.6 (80% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/wiki-embed/readme.txt
[+] wordpress-seo
| Location: https://www.wikimedia.it/wp-content/plugins/wordpress-seo/
| Latest Version: 22.0 (up to date)
| Last Updated: 2024-02-06T08:57:00.000Z
|
| Found By: Comment (Passive Detection)
|
| Version: 22.0 (100% confidence)
| Found By: Comment (Passive Detection)
| - https://www.wikimedia.it/, Match: 'optimized with the Yoast SEO plugin v22.0 -'
| Confirmed By:
| Readme - Stable Tag (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/wordpress-seo/readme.txt
| Readme - ChangeLog Section (Aggressive Detection)
| - https://www.wikimedia.it/wp-content/plugins/wordpress-seo/readme.txt
[+] Enumerating Config Backups (via Passive and Aggressive Methods)
Checking Config Backups - Time: 00:00:16 <==================================================================================================================================> (137 / 137) 100.00% Time: 00:00:16
[i] No Config Backups Found.
[+] WPScan DB API OK
| Plan: free
| Requests Done (during the scan): 10
| Requests Remaining: 0
[+] Finished: Tue Feb 13 04:02:13 2024
[+] Requests Done: 218
[+] Cached Requests: 7
[+] Data Sent: 85.322 KB
[+] Data Received: 2.373 MB
[+] Memory used: 274.359 MB
[+] Elapsed time: 00:00:37
File Metadata
Details
Attached
Mime Type
text/plain
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
14589852
Default Alt Text
wpscan20240213_after.txt (9 KB)
Attached To
Mode
T356039: Periodical Maintenance wikimedia.it - (january) february 2024
Attached
Detach File
Event Timeline
Log In to Comment