id: wp-mailchimp-log-exposure

info:
  name: WordPress Mailchimp 4 Debug Log Exposure
  author: aashiq
  severity: medium
  description: Searches for Mailchimp log exposure by attempting to query the debug log endpoint on wp-content
  metadata:
    max-request: 1
  tags: logs,wordpress,exposure,mailchimp

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/uploads/mc4wp-debug.log"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "WARNING: Form"

      - type: word
        words:
          - 'text/plain'
        part: header
# digest: 490a004630440220542b1f31b8fcca2878f4310dcdf17629ffc74dd8fbaeb837b1ebb458f30d1060022018111e368c8ea083ffc9be5e987b5727064a0706a0603eaa627f6a11e009f945:922c64590222798bb761d5b6d8e72950