URL: https://kala45.com/ [91.207.205.16] Started: Sat Nov 8 00:47:29 2025 Interesting Finding(s): Headers | Interesting Entries: | - x-powered-by: PHP/8.1.33 | - x-dns-prefetch-control: on | - x-litespeed-cache: hit | - alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" | Found By: Headers (Passive Detection) | Confidence: 100% robots.txt found: https://kala45.com/robots.txt | Interesting Entries: | - /wp-admin/ | - /wp-admin/admin-ajax.php | - /?filter | - /&filter | - /?attribute_ | - /&attribute_ | - /?price= | - /&price= | - /?brand= | - /&brand= | - /?orderby= | - /&orderby= | - /?add-to-cart= | - /&add-to-cart= | - /tag/ | - /author/ | - /*?s= # جستجو داخلی | - /page/* | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% XML-RPC seems to be enabled: https://kala45.com/xmlrpc.php | Found By: Link Tag (Passive Detection) | Confidence: 30% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ WordPress readme found: https://kala45.com/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% The external WP-Cron seems to be enabled: https://kala45.com/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 WordPress version 6.8.3 identified (Latest, released on 2025-09-30). | Found By: Rss Generator (Passive Detection) | - https://kala45.com/feed/, https://wordpress.org/?v=6.8.3 | - https://kala45.com/comments/feed/, https://wordpress.org/?v=6.8.3 The main theme could not be detected. Enumerating Users (via Passive and Aggressive Methods) No WPScan API Token given, as a result vulnerability data has not been output. You can get a free API token with 25 daily requests by registering at https://wpscan.com/register Finished: Sat Nov 8 00:48:20 2025 Requests Done: 29 Cached Requests: 8 Data Sent: 14.617 KB Data Received: 2.165 MB Memory used: 131.762 MB Elapsed time: 00:00:51 Scan Aborted: Max Scan Duration Reached