search

wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
https://wpscan.com/wordpress-cli-scanner
Other
8.37k stars 1.24k forks source link

Scan Aborted: --plugins-list Filename too long #1801

Open edxz101 opened 9 months ago

edxz101 commented 9 months ago

Subject of the issue

wpscan fail when add a list too long of plugins (over 256 characters) on --plugins-list option.

Your environment

Steps to reproduce

wpscan --url https://www.xxxxxx.com/ --random-user-agent --plugins-detection mixed --plugins-list=acf-content-analysis-for-yoast-seo,advanced-custom-fields-pro,advanced-custom-fields-table-field,akismet,autoptimize,custom-post-type-ui,duplicate-post,instagram-feed,simple-custom-post-order,wordpress-importer,wordpress-seo,wp-mail-smtp,wp-ultimate-csv-importer,wpforms-lite,wps-hide-login

Expected behavior

That wpscan can support a long list of plugins to improve speed and vulnerability detection.

Actual behavior

Scan Aborted: --plugins-list Filename too long @ rb_sysopen