====================================================================================================================================
| # Title     : WordPress - WPtouch Pro 4 Backup Disclosure Vulnerability                                                          |
| # Author    : indoushka                                                                                                          |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0(64-bit)                                               | 
| # Vendor    : wptouch.com                                                                                                        |  
| # Dork      : /wp-content/wptouch-data/backups                                                                                   |
====================================================================================================================================

P0C :

[+] The plugin exports a backup copy of its own settings to an exposed, unprotected folder, so the attacker can download a backup copy.

[+] Dorking İn Google Or Other Search Enggine.

[+] Use payload : /wp-content/wptouch-data/backups/

[+] https://127.0.0.1/spcporg/wp-content/wptouch-data/backups/wptouch-backup-7cbc55e8c65196efd2fd93657cb370af-20181208-055325.txt


Greetings to :=========================================================================================================================
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm * thelastvvv *Zigoo.eg                      |
=======================================================================================================================================