nuclei-templates/http/technologies/wordpress/plugins/newsletter.yaml

id: wordpress-newsletter

info:
  name: Newsletter – Send awesome emails from WordPress Detection
  author: ricardomaia
  severity: info
  reference:
    - https://wordpress.org/plugins/newsletter/
  metadata:
    plugin_namespace: newsletter
    wpscan: https://wpscan.com/plugin/newsletter
  tags: tech,wordpress,wp-plugin,top-200

http:
  - method: GET

    path:
      - "{{BaseURL}}/wp-content/plugins/newsletter/readme.txt"

    payloads:
      last_version: helpers/wordpress/plugins/newsletter.txt

    extractors:
      - type: regex
        part: body
        internal: true
        name: internal_detected_version
        group: 1
        regex:
          - '(?i)Stable.tag:\s?([\w.]+)'

      - type: regex
        part: body
        name: detected_version
        group: 1
        regex:
          - '(?i)Stable.tag:\s?([\w.]+)'

    matchers-condition: or
    matchers:
      - type: dsl
        name: "outdated_version"
        dsl:
          - compare_versions(internal_detected_version, concat("< ", last_version))

      - type: regex
        part: body
        regex:
          - '(?i)Stable.tag:\s?([\w.]+)'
# digest: 4a0a00473045022100ec6e645911f5dda4a2d47a1c163052c688a21297775974df8a46cbcda9dac66c0220081548c2d2c42f1eee1be6398b0aeaf3a99363dc212999273dc23d5aa1e1e3a5:922c64590222798bb761d5b6d8e72950
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								id: wordpress-newsletter
 								info:
-												refactoring

											
										
										
											2022-12-16 21:13:03 +00:00
+								  name: Newsletter – Send awesome emails from WordPress Detection
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								  author: ricardomaia
 								  severity: info
 								  reference:
 								    - https://wordpress.org/plugins/newsletter/
 								  metadata:
 								    plugin_namespace: newsletter
-												Removing blank lines

											
										
										
											2022-12-02 00:47:18 +00:00
+								    wpscan: https://wpscan.com/plugin/newsletter
-												refactoring

											
										
										
											2022-12-16 21:13:03 +00:00
+								  tags: tech,wordpress,wp-plugin,top-200
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
-												Refactoring the directory structure based on protocols (#7137)

* moving http templates

* updated cves.json

* moved network CVEs

* updated scripts

* updated workflows

* updated requests to http

* replaced network to tcp

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
											
										
										
											2023-04-27 04:28:59 +00:00
+								http:
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								  - method: GET
-												Auto WordPress Plugins Update [Wed Nov 15 04:02:31 UTC 2023] :robot:

											
										
										
											2023-11-15 04:02:31 +00:00
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								    path:
 								      - "{{BaseURL}}/wp-content/plugins/newsletter/readme.txt"
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
 								    payloads:
-												refactoring

											
										
										
											2022-12-16 21:13:03 +00:00
+								      last_version: helpers/wordpress/plugins/newsletter.txt
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
 								    extractors:
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								      - type: regex
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
+								        part: body
 								        internal: true
 								        name: internal_detected_version
 								        group: 1
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								        regex:
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
+								          - '(?i)Stable.tag:\s?([\w.]+)'
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								      - type: regex
 								        part: body
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
+								        name: detected_version
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								        group: 1
 								        regex:
 								          - '(?i)Stable.tag:\s?([\w.]+)'
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
 								    matchers-condition: or
 								    matchers:
 								      - type: dsl
 								        name: "outdated_version"
 								        dsl:
 								          - compare_versions(internal_detected_version, concat("< ", last_version))
 								      - type: regex
 								        part: body
 								        regex:
 								          - '(?i)Stable.tag:\s?([\w.]+)'
-												Auto Template Signing [Wed Nov 15 11:10:13 UTC 2023] :robot:

											
										
										
											2023-11-15 11:10:13 +00:00
+								# digest: 4a0a00473045022100ec6e645911f5dda4a2d47a1c163052c688a21297775974df8a46cbcda9dac66c0220081548c2d2c42f1eee1be6398b0aeaf3a99363dc212999273dc23d5aa1e1e3a5:922c64590222798bb761d5b6d8e72950