_______________________________________________________________
        __          _______   _____
        \ \        / /  __ \ / ____|
         \ \  /\  / /| |__) | (___   ___  __ _ _ __ ®
          \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \
           \  /\  /  | |     ____) | (__| (_| | | | |
            \/  \/   |_|    |_____/ \___|\__,_|_| |_|

        WordPress Security Scanner by the WPScan Team
                       Version 3.4.3
          Sponsored by Sucuri - https://sucuri.net
      @_WPScan_, @ethicalhack3r, @erwan_lr, @_FireFart_
_______________________________________________________________

[+] URL: http://tevelcyber.com/
[+] Effective URL: https://tevelcyber.com/
[+] Started: Thu Jan 24 05:16:05 2019

Interesting Finding(s):

[+] https://tevelcyber.com/
 | Interesting Entries:
 |  - server: nginx/1.14.1
 |  - x-acc-exp: 0
 |  - x-proxy-cache: BYPASS tevelcyber.com
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

[+] http://tevelcyber.com/robots.txt
 | Interesting Entries:
 |  - /wp-admin/
 |  - /wp-admin/admin-ajax.php
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

[+] https://tevelcyber.com/xmlrpc.php
 | Found By: Link Tag (Passive Detection)
 | Confidence: 100%
 | Confirmed By: Direct Access (Aggressive Detection), 100% confidence
 | References:
 |  - http://codex.wordpress.org/XML-RPC_Pingback_API
 |  - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
 |  - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
 |  - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
 |  - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access

[+] http://tevelcyber.com/readme.html
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

[+] WordPress version 4.9.9 identified (Latest, released on 2018-12-13).
 | Detected By: Rss Generator (Passive Detection)
 |  - https://tevelcyber.com/feed/, <generator>https://wordpress.org/?v=4.9.9</generator>
 |  - https://tevelcyber.com/comments/feed/, <generator>https://wordpress.org/?v=4.9.9</generator>

[+] WordPress theme in use: enfold
 | Location: http://tevelcyber.com/wp-content/themes/enfold/
 | Style URL: http://tevelcyber.com/wp-content/themes/enfold/style.css
 | Style Name: Enfold
 | Style URI: www.kriesi.at/themes/enfold/
 | Description: <strong>A superflexible and responsive Business Theme by Kriesi</strong> - <br/> Update notification...
 | Author: Kriesi
 | Author URI: https://kriesi.at
 |
 | Detected By: Urls In Homepage (Passive Detection)
 |
 | Version: 4.3.2 (80% confidence)
 | Detected By: Style (Passive Detection)
 |  - http://tevelcyber.com/wp-content/themes/enfold/style.css, Match: 'Version: 4.3.2'


[i] Plugin(s) Identified:

[+] wordpress-seo
 | Location: http://tevelcyber.com/wp-content/plugins/wordpress-seo/
 | Last Updated: 2019-01-08T09:18:00.000Z
 | [!] The version is out of date, the latest version is 9.4
 |
 | Detected By: Comment (Passive Detection)
 |
 | [!] 1 vulnerability identified:
 |
 | [!] Title: Yoast SEO <= 9.1 - Authenticated Race Condition
 |     Fixed in: 9.2
 |     References:
 |      - https://wpvulndb.com/vulnerabilities/9150
 |      - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19370
 |      - https://plugins.trac.wordpress.org/changeset/1977260/wordpress-seo
 |      - https://www.youtube.com/watch?v=nL141dcDGCY
 |      - http://packetstormsecurity.com/files/150497/
 |      - https://github.com/Yoast/wordpress-seo/pull/11502/commits/3bfa70a143f5ea3ee1934f3a1703bb5caf139ffa
 |
 | Version: 7.8 (60% confidence)
 | Detected By: Comment (Passive Detection)
 |  - https://tevelcyber.com/, Match: 'optimized with the Yoast SEO plugin v7.8 -'


[i] No Config Backups Found.


[i] No Valid Passwords Found.

Scan Aborted: Canceled by User
