Nuclei Template
View the template here CVE-2020-28976.yaml
Validate with Nuclei
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-28976.yaml
WordPress Canto plugin 1.3.0 is susceptible to blind server-side request forgery. An attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
View the template here CVE-2020-28976.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-28976.yaml
References:
https://www.canto.com/integrations/wordpress/