URL: https://wardakbaba.com/ [2a02:4780:4c:2d45:bc70:f60d:35b0:6f2b]
Started: Tue Nov 18 13:23:45 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - X-Powered-By: PHP/8.0.30
 |  - Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
 |  - platform: hostinger
 |  - panel: hpanel
 |  - Content-Security-Policy: upgrade-insecure-requests
 |  - Server: hcdn
 |  - alt-svc: h3=":443"; ma=86400
 |  - x-hcdn-request-id: 9e15794ab2366cf06d8d2f9a2c3f9419-bos-edge3
 |  - x-hcdn-cache-status: DYNAMIC
 |  - x-hcdn-upstream-rt: 0.638
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://wardakbaba.com/robots.txt
 | Interesting Entries:
 |  - /wp-content/uploads/wc-logs/
 |  - /wp-content/uploads/woocommerce_transient_files/
 |  - /wp-content/uploads/woocommerce_uploads/
 |  - /*?add-to-cart=
 |  - /*?*add-to-cart=
 |  - /wp-admin/
 |  - /wp-admin/admin-ajax.php
 |  - /wbtm_bus_booking/
 |  - /*?wbtm_bus_booking=
 |  - /*?post_type=wbtm_bus_booking
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

WordPress readme found: https://wardakbaba.com/readme.html
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

This site has 'Must Use Plugins': https://wardakbaba.com/wp-content/mu-plugins/
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 80%
 | Reference: http://codex.wordpress.org/Must_Use_Plugins

The external WP-Cron seems to be enabled: https://wardakbaba.com/wp-cron.php
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 60%
 | References:
 |  - https://www.iplocation.net/defend-wordpress-from-ddos
 |  - https://github.com/wpscanteam/wpscan/issues/1299

WordPress version 6.7.4 identified (Outdated, released on 2025-09-30).
 | Found By: Rss Generator (Passive Detection)
 |  - https://wardakbaba.com/feed/, <generator>https://wordpress.org/?v=6.7.4</generator>
 |  - https://wardakbaba.com/comments/feed/, <generator>https://wordpress.org/?v=6.7.4</generator>

WordPress theme in use: Zephyr
 | Location: https://wardakbaba.com/wp-content/themes/Zephyr/
 | Latest Version: 8.40.1 (up to date)
 | Last Updated: 2025-10-30T02:45:24.000Z
 | Style URL: https://wardakbaba.com/wp-content/themes/Zephyr/style.css
 | Style Name: Zephyr
 | Style URI: http://zephyr.us-themes.com/
 | Description: Material Design WordPress Theme...
 | Author: AbzarWP.Com
 | Author URI: https://abzarwp.com
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 8.40.1 (80% confidence)
 | Found By: Style (Passive Detection)
 |  - https://wardakbaba.com/wp-content/themes/Zephyr/style.css, Match: 'Version: 8.40.1'

Enumerating Most Popular Plugins (via Passive Methods)
Checking Plugin Versions (via Passive and Aggressive Methods)

 Plugin(s) Identified:

abzarwp-theme-zephyr
 | Location: https://wardakbaba.com/wp-content/plugins/abzarwp-theme-zephyr/
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | The version could not be determined.

addon-bus-ticket-booking-with-seat-pro
 | Location: https://wardakbaba.com/wp-content/plugins/addon-bus-ticket-booking-with-seat-pro/
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | The version could not be determined.

bus-ticket-booking-with-seat-reservation
 | Location: https://wardakbaba.com/wp-content/plugins/bus-ticket-booking-with-seat-reservation/
 | Last Updated: 2025-11-04T07:35:00.000Z
 |  The version is out of date, the latest version is 5.5.5
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 5.5.3 (50% confidence)
 | Found By: Readme - ChangeLog Section (Aggressive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/bus-ticket-booking-with-seat-reservation/readme.txt

chatway-live-chat
 | Location: https://wardakbaba.com/wp-content/plugins/chatway-live-chat/
 | Latest Version: 1.4.4 (up to date)
 | Last Updated: 2025-11-12T10:06:00.000Z
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 1.4.4 (100% confidence)
 | Found By: Readme - Stable Tag (Aggressive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/chatway-live-chat/readme.txt
 | Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/chatway-live-chat/readme.txt

contact-form-7
 | Location: https://wardakbaba.com/wp-content/plugins/contact-form-7/
 | Latest Version: 6.1.3 (up to date)
 | Last Updated: 2025-10-29T09:00:00.000Z
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 6.1.3 (90% confidence)
 | Found By: Query Parameter (Passive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.3
 | Confirmed By: Readme - Stable Tag (Aggressive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/contact-form-7/readme.txt

js_composer
 | Location: https://wardakbaba.com/wp-content/plugins/js_composer/
 | Last Updated: 2025-10-28T08:11:39.000Z
 |  The version is out of date, the latest version is 8.7.2
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Body Tag (Passive Detection)
 |
 | Version: 8.6.1 (80% confidence)
 | Found By: Body Tag (Passive Detection)
 |  - https://wardakbaba.com/, Match: 'js-comp-ver-8.6.1'
 | Confirmed By: Query Parameter (Passive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=8.6.1
 |  - https://wardakbaba.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=8.6.1

revslider
 | Location: https://wardakbaba.com/wp-content/plugins/revslider/
 | Latest Version: 6.7.35 (up to date)
 | Last Updated: 2025-07-04T23:34:02.000Z
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By:
 |  Urls In 404 Page (Passive Detection)
 |  Meta Generator (Passive Detection)
 |
 | Version: 6.7.38 (100% confidence)
 | Found By: Meta Generator (Passive Detection)
 |  - https://wardakbaba.com/, Match: 'Powered by Slider Revolution 6.7.38'
 | Confirmed By: Release Log (Aggressive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/revslider/release_log.html, Match: 'Version 6.7.38 (30th September 2025)'

Ultimate_VC_Addons
 | Location: https://wardakbaba.com/wp-content/plugins/Ultimate_VC_Addons/
 | Latest Version: 3.21.2 (up to date)
 | Last Updated: 2025-10-28T20:42:55.000Z
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By: Urls In 404 Page (Passive Detection)
 |
 | Version: 3.21.2 (60% confidence)
 | Found By: Change Log (Aggressive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/Ultimate_VC_Addons/changelog.txt, Match: '3.21.2 -'

woocommerce
 | Location: https://wardakbaba.com/wp-content/plugins/woocommerce/
 | Latest Version: 10.3.5 (up to date)
 | Last Updated: 2025-11-12T13:35:00.000Z
 |
 | Found By: Urls In Homepage (Passive Detection)
 | Confirmed By:
 |  Urls In 404 Page (Passive Detection)
 |  Meta Generator (Passive Detection)
 |
 | Version: 10.3.5 (100% confidence)
 | Found By: Query Parameter (Passive Detection)
 |  - https://wardakbaba.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.3.5
 |  - https://wardakbaba.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.3.5
 |  - https://wardakbaba.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=10.3.5
 | Confirmed By:
 |  Meta Generator (Passive Detection)
 |   - https://wardakbaba.com/, Match: 'WooCommerce 10.3.5'
 |  Readme - ChangeLog Section (Aggressive Detection)
 |   - https://wardakbaba.com/wp-content/plugins/woocommerce/readme.txt

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Tue Nov 18 13:24:30 2025
Requests Done: 71
Cached Requests: 7
Data Sent: 20.408 KB
Data Received: 1.111 MB
Memory used: 275.52 MB
Elapsed time: 00:00:45

Target

wardakbaba.com

Scan method

Enumerate Popular plugins

Run command

wpscan --url https://wardakbaba.com/ --enumerate p --random-user-agent --force --max-scan-duration 60

Scan time

45s

Quick report

Order full scan ($19/one time)

Scan date

18 Nov 2025 16:24

Copy scan report

Download report

Remove scan result

$

Total scans

About 3 times