by hunter_eyes

hunter:~# wpscan --url http://www.egyptthefuture.com/
_______________________________________________________________
        __          _______   _____
        \ \        / /  __ \ / ____|
         \ \  /\  / /| |__) | (___   ___  __ _ _ __
          \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \
           \  /\  /  | |     ____) | (__| (_| | | | |
            \/  \/   |_|    |_____/ \___|\__,_|_| |_|

        WordPress Security Scanner by the WPScan Team
                        Version v2.4.1
     Sponsored by the RandomStorm Open Source Initiative
   @_WPScan_, @ethicalhack3r, @erwan_lr, pvdl, @_FireFart_
_______________________________________________________________

[+] URL: http://www.egyptthefuture.com/
[+] Started: Wed Mar 18 00:13:00 2015

[+] robots.txt available under: 'http://www.egyptthefuture.com/robots.txt'
[+] Interesting entry from robots.txt: /cgi-bin/
[+] Interesting entry from robots.txt: /wp-admin/
[+] Interesting entry from robots.txt: /wp-includes/
[+] Interesting entry from robots.txt: /wp-content/plugins/
[+] Interesting entry from robots.txt: /wp-content/cache/
[+] Interesting entry from robots.txt: /wp-content/themes/
[+] Interesting entry from robots.txt: /trackback/
[+] Interesting entry from robots.txt: /comments/
[+] Interesting entry from robots.txt: */trackback/
[+] Interesting entry from robots.txt: */comments/
[+] Interesting entry from robots.txt: wp-login.php
[+] Interesting entry from robots.txt: wp-signup.php
[!] The WordPress 'http://www.egyptthefuture.com/readme.html' file exists
[+] Interesting header: CF-RAY: 1c8c0b38dbc7149d-AMS
[+] Interesting header: LINK: <http://www.egyptthefuture.com/>; rel=shortlink
[+] Interesting header: SERVER: cloudflare-nginx
[+] Interesting header: SET-COOKIE: _icl_current_language=en; expires=Wed, 18-Mar-2015 22:13:14 GMT; path=/
[+] Interesting header: X-POWERED-BY: PHP/5.4.35
[+] XML-RPC Interface available under: http://www.egyptthefuture.com/xmlrpc.php

[+] WordPress version 4.1.1 identified from rss generator

[+] WordPress theme in use: portal-theme

[+] Name: portal-theme
 |  Location: http://www.egyptthefuture.com/wp-content/themes/portal-theme/
 |  Style URL: http://www.egyptthefuture.com/wp-content/themes/portal-theme/style.css
 |  Description:

[+] Enumerating plugins from passive detection ...
 | 4 plugins found:

[+] Name: bootstrap-for-contact-form-7 - v1.1.0
 |  Location: http://www.egyptthefuture.com/wp-content/plugins/bootstrap-for-contact-form-7/
 |  Readme: http://www.egyptthefuture.com/wp-content/plugins/bootstrap-for-contact-form-7/readme.txt
[!] Directory listing is enabled: http://www.egyptthefuture.com/wp-content/plugins/bootstrap-for-contact-form-7/

[+] Name: contact-form-7 - v4.1
 |  Location: http://www.egyptthefuture.com/wp-content/plugins/contact-form-7/
 |  Readme: http://www.egyptthefuture.com/wp-content/plugins/contact-form-7/readme.txt
[!] Directory listing is enabled: http://www.egyptthefuture.com/wp-content/plugins/contact-form-7/

[!] Title: Contact Form 7 3.5.3 - Crafted File Extension Upload Remote Code Execution
    Reference: http://packetstormsecurity.com/files/125018/
    Reference: http://seclists.org/fulldisclosure/2014/Feb/0
    Reference: http://osvdb.org/102776

[+] Name: sitepress-multilingual-cms
 |  Location: http://www.egyptthefuture.com/wp-content/plugins/sitepress-multilingual-cms/
[!] Directory listing is enabled: http://www.egyptthefuture.com/wp-content/plugins/sitepress-multilingual-cms/

[!] Title: sitepress-multilingual-cms - Full Path Disclosure
    Reference: http://1337day.com/exploit/20067

[+] Name: the-events-calendar - v3.9.1
 |  Location: http://www.egyptthefuture.com/wp-content/plugins/the-events-calendar/
 |  Readme: http://www.egyptthefuture.com/wp-content/plugins/the-events-calendar/readme.txt
[!] Directory listing is enabled: http://www.egyptthefuture.com/wp-content/plugins/the-events-calendar/

[+] Finished: Wed Mar 18 00:13:46 2015
[+] Memory used: 5.277 MB