wp-plugin-rest-auth-bypass

What problem does it solve?

WordPress plugins often expose unauthenticated state-changing REST API endpoints that standard WordPress security scans miss, allowing attackers to publish unauthorized content, modify site settings, or leak sensitive data without valid credentials.

Core Features & Use Cases

• Plugin Namespace Enumeration: Discovers all third-party plugin REST namespaces on a target WordPress site, filtering out core WordPress namespaces to focus on custom plugin routes.
• Route Mapping & Vulnerability Identification: Maps all routes for each plugin namespace and flags unauthenticated POST, PUT, PATCH, and DELETE endpoints that accept requests without authentication.
• Exploit Validation: Tests identified endpoints for common exploit vectors including unauthorized content publishing, settings modification, and hidden endpoint data leakage.
• Use Case: For penetration testers assessing WordPress site security, this skill quickly finds exploitable plugin REST API flaws that would be missed by generic WordPress vulnerability scanners.

Quick Start

Use this skill to scan a target WordPress site for unauthenticated write access in plugin REST API endpoints and validate potential exploitability.