3rd Bounty ₹5000: WordPress Information Disclosure From Upstox

Jun 16, 2023 2 min read Utsavpari Gosai

Hello Hackers,

Today I will share with you my third bounty, which involved information disclosure. So, without wasting time, let’s get started.

I was hunting on a program that used WordPress. To begin, I obtained a WordPress-based wordlist from the PayloadAllTheThings GitHub repository and started fuzzing. I encountered several 404 and 403 errors, along with some false positives. However, I then stumbled upon something interesting: https://example.com/wp/wp-admin/install.php. When I visited this URL, it displayed a message from WordPress stating that the WordPress installation was already complete and provided a link to log in.

Curious to explore further, I attempted to change “install.php” to “delete.php” and “remove.php,” but these attempts did not yield any results. Then, I decided to try “upgrade.php,” which revealed a message stating that the database was already upgraded. This indicated that the site was using the latest version of WordPress. However, if it wasn’t up to date, it would display the WordPress version number. Since several WordPress plugins were recently found to be vulnerable, exploiting this vulnerability could provide information about the version being used and potentially allow for an upgrade without the company’s knowledge.

I reported this issue to the company, highlighting it as an information disclosure vulnerability. The company acknowledged the report, resolved the issue, and changed the HTTP response of the page from 200 to 401. As a reward, they granted me ₹5000.

This is the story of my encounter with a WordPress CMS information disclosure vulnerability. I would like to recommend to any bug bounty beginners that if your target uses WordPress, always try adding “/wp/wp-admin/install.php,” “/wp-admin/install.php,” or “upgrade.php” to your testing. By doing so, you can help secure the company and potentially identify vulnerabilities. Remember, not all work is driven by the pursuit of bounty; having good intentions and motives can lead to success, supported by your faith and the support of loved ones.

I am grateful to God, my family, and a special person who always supports me.



Thank you for reading. I am not a professional writer, but I wrote this to assist fellow bug hunters with my experience.

Thank You,
MR.X FACTOR

🔗 Handles:

← Back To Homepage