Introducing Apex Discovery to secure every domain you actually own
Most tools will only test the domains you already know about. We’ve decided that’s not enough. TLDR: Detectify’s new Apex Discovery automatically identifies root domains …
Newly added security tests, September 21, 2017: Zend, cPanel and WordPress plugins
Detectify
We have been busy this week, adding 14 new security tests to our service. The main focus of this update are various WordPress plugin vulnerabilities that we covered in more detail in a blog post earlier this week.
Here are the latest additions to the Detectify scanner:
- Symfony parameters.yml Exposure
- Zend application.ini Exposure
- Python flask fingerprinting
- cPanel Open Redirect (SEC-300) – You can read more about this vulnerability on cPanel’s website
- Magento configuration backup disclosure
- WordPress WooCommerce PDF Invoices & Packing Slips Authenticated XSS
- WordPress Ninja Forms Authenticated XSS
- WordPress Anti-Malware Security and Brute-Force Firewall Authenticated XSS
- WordPress Pretty Links Authenticated XSS
- WordPress Loco Translate Authenticated XSS
- WordPress Google Pagespeed Insights Authenticated XSS
- WordPress Booking Calendar Authenticated XSS
- WordPress Crelly Slider Authenticated XSS
- WordPress Pinfinity Theme XSS
Check out more content
Introducing the Detectify MCP Server to connect security intelligence into your AI workflows
We are launching the Detectify MCP Server to deliver real-time vulnerability data and attack surface insights directly into your AI-powered workflows. Built for developers and …
