URL: https://thewaltdisneycompany.com/ [3.167.192.16]
Started: Tue Sep 30 11:43:58 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - X-UA-Compatible: IE=edge
 |  - Server: Apache
 |  - X-Batcache-Activated: 1
 |  - Access-Control-Allow-Origin: *
 |  - Access-Control-Allow-Methods: GET, POST, OPTIONS
 |  - Access-Control-Allow-Headers: Authorization, Content-Type
 |  - Via: 1.1 e2876f64809db799c11f72a8f088fc24.cloudfront.net (CloudFront)
 |  - X-Amz-Cf-Pop: LAX54-P4
 |  - X-Amz-Cf-Id: cgztmv0r9-Ct6P31weTyHH5-DKJXD_ivsDXA55AgFHDWzMt1aVXOnQ==
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

XML-RPC seems to be enabled: https://thewaltdisneycompany.com/wp/xmlrpc.php
 | Found By: Link Tag (Passive Detection)
 | Confidence: 30%
 | References:
 |  - http://codex.wordpress.org/XML-RPC_Pingback_API
 |  - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/
 |  - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/
 |  - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/
 |  - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/

This site has 'Must Use Plugins': https://thewaltdisneycompany.com/app/mu-plugins/
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 80%
 | Reference: http://codex.wordpress.org/Must_Use_Plugins


Fingerprinting the version -: |============================================== No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Tue Sep 30 11:44:55 2025
Requests Done: 1093
Cached Requests: 4
Data Sent: 349.59 KB
Data Received: 24.819 MB
Memory used: 156.957 MB
Elapsed time: 00:00:56

Scan Aborted: Max Scan Duration Reached