Security Test: WordPress RDF Feed Users Exposed¶

Scanner(s) Support¶

Description¶

Default Severity: high

The issue occurs when the WordPress RDF feed at /feed/rdf/ is accessible without authentication, exposing post metadata including author details. This allows attackers to enumerate users, aiding in reconnaissance and enabling targeted attacks.

Configuration¶

Identifier: information_disclosure/wordpress_rdf_feed_user_exposed

Examples¶

All configuration available:

checks:
  information_disclosure/wordpress_rdf_feed_user_exposed:
    skip: false # default

Compliance and Standards¶