diff --git a/lib/wpscan/wp_target.rb b/lib/wpscan/wp_target.rb index 17a2612d..59fa5a64 100644 --- a/lib/wpscan/wp_target.rb +++ b/lib/wpscan/wp_target.rb @@ -138,32 +138,42 @@ class WpTarget # Should check wp-login.php if registration is enabled or not def registration_enabled? resp = Browser.instance.get(registration_url) - if resp.code == 302 and resp.headers_hash["location"] =~ /wp-login\.php\?registration=disabled/ + # redirect only on non multi sites + if resp.code == 302 and resp.headers_hash["location"] =~ /wp-login\.php\?registration=disabled/i enabled = false - else + # multi site registration form + elsif resp.code == 200 and resp.body =~ /