diff --git a/nuclei-templates/cve-less/plugins/wp-migrate-2-aws-e5583657ed5a9882a96eea1651f9a809.yaml b/nuclei-templates/cve-less/plugins/wp-migrate-2-aws-e5583657ed5a9882a96eea1651f9a809.yaml new file mode 100644 index 0000000000..6da15ed022 --- /dev/null +++ b/nuclei-templates/cve-less/plugins/wp-migrate-2-aws-e5583657ed5a9882a96eea1651f9a809.yaml @@ -0,0 +1,59 @@ +id: wp-migrate-2-aws-e5583657ed5a9882a96eea1651f9a809 + +info: + name: > + WP on AWS <= 5.2.1 - Reflected Cross-Site Scripting + author: topscoder + severity: medium + description: > + + reference: + - https://github.com/topscoder/nuclei-wordfence-cve + - https://www.wordfence.com/threat-intel/vulnerabilities/id/8c82dc37-0b9a-48c2-a8a6-fbee6182003f?source=api-scan + classification: + cvss-metrics: + cvss-score: + cve-id: + metadata: + fofa-query: "wp-content/plugins/wp-migrate-2-aws/" + google-query: inurl:"/wp-content/plugins/wp-migrate-2-aws/" + shodan-query: 'vuln:' + tags: cve,wordpress,wp-plugin,wp-migrate-2-aws,medium + +http: + - method: GET + redirects: true + max-redirects: 3 + path: + - "{{BaseURL}}/wp-content/plugins/wp-migrate-2-aws/readme.txt" + + extractors: + - type: regex + name: version + part: body + group: 1 + internal: true + regex: + - "(?mi)Stable tag: ([0-9.]+)" + + - type: regex + name: version + part: body + group: 1 + regex: + - "(?mi)Stable tag: ([0-9.]+)" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + words: + - "wp-migrate-2-aws" + part: body + + - type: dsl + dsl: + - compare_versions(version, '<= 5.2.1') \ No newline at end of file