WordPress Directory Listing : The Story of Cloakfusion Bug

Hi Followers

Due to the workload cant able to update the website but I am back with my work again 

The Story

So this is a story of a very minor bug which most webmasters forgot to patch this is about the directory listing vulnerability in the WordPrets and they think that they patched it.

But still the danger exists there are three folders in the WordPress main directory they are

• wp-admin
• wp-content
• wp-includes

what they actually do they only deny the access to these three directory but they forget that these directory also contains some other folders so to secure the website they should have to revoke the access to all of the folders of these three folders.

The Bug

The bug exists here

during browsing www.cloakfusion.com i found that it is a WordPress based website to first I tried some simple things like accessing the readme.html file but it was protected and the three directory is protected as well but after that I browsed the folder which are inside these three folders

Then I tried

https://www.cloakfusion.com/wp-content/uploads 

and yes I can browse it 

I also tried 

https://www.cloakfusion.com/wp-includes/

and it was also not protected

here are the screenshots of both

So this has to be patched by modifying the .htaccess file and deny the access to these folders

So tuned more is coming soon

Thank You

Jitendra Santram Singh (Team Computer Korner ) 

Feel Free To Leave A Comment If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!