sexmasterka.com wpscan

[+] URL: http://sexmasterka.com/
[+] Started: Thu Jul 21 12:27:16 2016

[+] Interesting header: SERVER: LiteSpeed

[+] WordPress version 4.5.3 (Released on 2016-06-21) identified from meta generator, advanced fingerprinting, links opml

[+] WordPress theme in use: sexmasterka - v1.1

[+] Name: sexmasterka - v1.1
 |  Location: http://sexmasterka.com/wp-content/themes/sexmasterka/
 |  Style URL: http://sexmasterka.com/wp-content/themes/sexmasterka/style.css
 |  Theme Name: SEXMASTERKA
 |  Theme URI: http://eatnet.pl
 |  Description: Motyw przygotowany dla SEXMASTERKA
 |  Author: EATNET
 |  Author URI: http://eatnet.pl

[+] Detected parent theme: Divi - v2.7.5

[+] Name: Divi - v2.7.5
 |  Location: http://sexmasterka.com/wp-content/themes/Divi/
 |  Changelog: http://sexmasterka.com/wp-content/themes/Divi/changelog.txt
 |  Style URL: http://sexmasterka.com/wp-content/themes/Divi/style.css
 |  Theme Name: Divi
 |  Theme URI: http://www.elegantthemes.com/gallery/divi/
 |  Description: Smart. Flexible. Beautiful. Divi is the most powerful theme inour collection.
 |  Author: Elegant Themes
 |  Author URI: http://www.elegantthemes.com

[+] Enumerating plugins from passive detection ...
 | 3 plugins found:

[+] Name: bwp-minify
 |  Latest version: 1.3.3
 |  Location: http://sexmasterka.com/wp-content/plugins/bwp-minify/

[+] Name: easy-digital-downloads
 |  Latest version: 2.6.4
 |  Location: http://sexmasterka.com/wp-content/plugins/easy-digital-downloads/

[!] We could not determine a version so all vulnerabilities are printed out

[!] Title: Easy Digital Downloads <= 2.5.7 - PHP Object Injection
    Reference: https://wpvulndb.com/vulnerabilities/8404
    Reference: https://github.com/easydigitaldownloads/Easy-Digital-Downloads/commit/7e83d2737b430c76f515b5433ee067fa5e6b1d4f
[i] Fixed in: 2.5.8

[+] Name: wp-super-cache
 |  Latest version: 1.4.8
 |  Location: http://sexmasterka.com/wp-content/plugins/wp-super-cache/

[!] We could not determine a version so all vulnerabilities are printed out

[!] Title: WP-Super-Cache 1.3 - Remote Code Execution
    Reference: https://wpvulndb.com/vulnerabilities/6623
    Reference: http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/
    Reference: http://wordpress.org/support/topic/pwn3d
    Reference: http://blog.sucuri.net/2013/04/update-wp-super-cache-and-w3tc-immediately-remote-code-execution-vulnerability-disclosed.html
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/wp-cache.php wp_nonce_url Function URI XSS

    Reference: https://wpvulndb.com/vulnerabilities/6624
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/wptouch.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6625
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/searchengine.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6626
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/domain-mapping.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6627
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/badbehaviour.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6628
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/awaitingmoderation.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6629
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache <= 1.4.2 - Persistent Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/7889
    Reference: http://blog.sucuri.net/2015/04/security-advisory-persistent-xss-in-wp-super-cache.html
[i] Fixed in: 1.4.3

[!] Title: WP Super Cache <= 1.4.4 - Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/8197
    Reference: http://z9.io/2015/09/25/wp-super-cache-1-4-5/
[i] Fixed in: 1.4.5

[!] Title: WP Super Cache <= 1.4.4 - PHP Object Injection
    Reference: https://wpvulndb.com/vulnerabilities/8198
    Reference: http://z9.io/2015/09/25/wp-super-cache-1-4-5/
[i] Fixed in: 1.4.5

[+] Finished: Thu Jul 21 12:27:58 2016
[+] Requests Done: 89
[+] Elapsed time: 00:00:42