CORS Credential WordPress Skill

Detect, confirm, and exploit CORS credential reflection on WordPress REST API endpoints. CORS misconfiguration is one of the most common critical findings in US SMB WordPress sites (~7-8% of all WP targets), enabling cross-origin data exfiltration with victim cookies. Documents 8 CORS variants and full browser PoC construction.

When to Use

• After wp-mass-recon flags a target with Access-Control-Allow-Credentials: true.
• Testing any WordPress site's REST API for cross-origin data access.
• Building attack chains: CORS → user enumeration → spear-phishing → ATO.
• Validating whether a CORS finding is exploitable (not just present).

Prerequisites

• curl and python3.
• web_extract or browser_navigate for browser PoC verification.
• Target must have WordPress REST API accessible (/wp-json/wp/v2/).

How to Run