Question

During a web application assessment, you access https://target.example.com/wp-json/wp/v2/users on a WordPress-based marketing site and receive a JSON array containing objects with 'id', 'name', and 'slug' fields for several accounts. Which follow-up action most directly leverages this finding to advance the engagement?

Accepted Answer

Use the disclosed 'slug' values as valid usernames to conduct a targeted password-spraying attack against the wp-login.php endpoint

Answer

Submit the JSON response to the client as a critical remote code execution vulnerability requiring immediate patching

Answer

Attempt an XML external entity (XXE) injection using the returned JSON structure to read local files

Answer

Replay the same request over the XML-RPC interface to trigger a server-side request forgery against the metadata endpoint