URL: https://www.journalism.cuny.edu/wp-json/ [192.124.249.109]
Started: Wed Dec  3 21:01:22 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - X-Sucuri-ID: 11009
 |  - Content-Security-Policy: upgrade-insecure-requests;
 |  - X-Robots-Tag: noindex
 |  - Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
 |  - Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
 |  - Allow: GET
 |  - X-Httpd-Modphp: 1
 |  - X-UA-Compatible: IE=edge
 |  - Host-Header: 6b7412fb82ca5edfd0917e3957f05d89
 |  - X-Proxy-Cache: EXPIRED
 |  - X-Proxy-Cache-Info: 0 NC:000000 UP:
 |  - Server: Sucuri/Cloudproxy
 |  - X-Sucuri-Cache: BYPASS
 |  - Alt-Svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

This site has 'Must Use Plugins': https://www.journalism.cuny.edu/wp-json/wp-content/mu-plugins/
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 80%
 | Reference: http://codex.wordpress.org/Must_Use_Plugins

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Wed Dec  3 21:02:37 2025
Requests Done: 39
Cached Requests: 4
Data Sent: 11.621 KB
Data Received: 1.749 MB
Memory used: 99.508 MB
Elapsed time: 00:01:15

Scan Aborted: Max Scan Duration Reached

Target

www.journalism.cuny.edu

Scan method

Enumerate Wordpress Users

Run command

wpscan --url https://www.journalism.cuny.edu/wp-json/ --enumerate u --random-user-agent --force --max-scan-duration 60

Scan time

75s

Quick report

Order full scan ($19/one time)

Scan date

04 Dec 2025 00:02

Copy scan report

Download report

Remove scan result

$