Summary

In this post, we will explore the unauthenticated WordPress REST API email disclosure via an Oracle-style attack. The exploit is quite interesting and definitely worth knowing for a future pentest!

Script link

GitHub - pog007/CVE-2023-5561-PoC: WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack

WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on…

Description