Description
WebDAV is enabled on this server and this directory has write permissions enabled. Invicti was able to create a test file within this directory using the PUT method. The PUT method is a part of the WebDAV standard for remote content editing. A poorly configured Web server can mistakenly provide remote access to the PUT method without requiring any form of login.
Remediation
Restrict access for method PUT or if it's not being used, consider disabling it.
References
Related Vulnerabilities
WordPress Plugin YITH WooCommerce Ajax Search Security Bypass (1.6.9)
Possible Database Name Disclosure
WordPress Plugin leads5050-visitor-insights Security Bypass (1.0.5)
SAP Knowledge Management and Collaboration (KMC) incorrect permissions
WordPress Plugin GDPR Cookie Compliance Security Bypass (4.0.2)