How can I identify whether a WordPress website has a public or form-based PDF upload endpoint?

Identifying whether a WordPress website has public or form-based PDF upload functionality can be approached through several indicators and best practices. Here are some insights:

Common Indicators of File Upload Forms on WordPress Sites

1. Form Elements: Look for HTML <form> elements on the site that include an <input type="file">. This is a common way to allow users to upload files.
2. Plugins: Many WordPress sites use plugins for file uploads. Common plugins include Contact Form 7, WPForms, or Gravity Forms, which may have file upload capabilities.
3. Custom Upload Pages: Some sites may have dedicated pages for uploads, often linked in the navigation or footer.

How Upload Plugins or Form Handlers Typically Store Files

• Default Upload Directory: By default, WordPress stores uploaded files in the /wp-content/uploads/ directory, organized by year and month. If you see files in this directory, it may indicate that uploads are allowed.
• Custom Directories: Some plugins allow configuration of custom upload directories. Check the plugin documentation if you can identify which one is being used.

Whether File Paths Alone Can Indicate an Upload Mechanism

• File Paths: While file paths can indicate where files are stored, they do not necessarily confirm the existence of an upload mechanism. You would need to find forms or endpoints that facilitate uploads.

Best Practices for Discovering Upload Functionality

• Ethical Considerations: Always ensure that your exploration does not violate the site's terms of service. Avoid automated tools that could be seen as intrusive.
• Manual Inspection: Use browser developer tools to inspect forms and network requests when interacting with the site. Look for any requests that might indicate file uploads.
• Documentation Review: If available, review the site's documentation or help sections for any mention of upload capabilities.

This approach should help you ethically and technically assess the presence of upload functionality on a WordPress site.

References:

• General WordPress security and performance tips
• Ensure appropriate controls are in place when accepting files from users
• Microsoft Vulnerability Research Advisory MSVR11-010
• Microsoft Security Bulletin MS00-093 - Critical
• Use the Power Apps checker web API
• Retrieve the list of rulesets
• Retrieve the list of rules
• Invoke analysis
• Check for analysis status
• Unrestricted File Upload
• File Signature Table
• Architecture diagram that shows blocked public access to a WordPress administration panel
• Download a Visio file of this architecture.