nuclei-templates/http/technologies/wordpress/plugins/nextgen-gallery.yaml

id: wordpress-nextgen-gallery

info:
  name: WordPress Gallery Plugin – NextGEN Gallery Detection
  author: ricardomaia
  severity: info
  reference:
    - https://wordpress.org/plugins/nextgen-gallery/
  metadata:
    max-request: 1
    plugin_namespace: nextgen-gallery
    wpscan: https://wpscan.com/plugin/nextgen-gallery
  tags: tech,wordpress,wp-plugin,top-200

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/nextgen-gallery/readme.txt"

    payloads:
      last_version: helpers/wordpress/plugins/nextgen-gallery.txt

    extractors:
      - type: regex
        part: body
        internal: true
        name: internal_detected_version
        group: 1
        regex:
          - '(?i)Stable.tag:\s?([\w.]+)'

      - type: regex
        part: body
        name: detected_version
        group: 1
        regex:
          - '(?i)Stable.tag:\s?([\w.]+)'

    matchers-condition: or
    matchers:
      - type: dsl
        name: "outdated_version"
        dsl:
          - compare_versions(internal_detected_version, concat("< ", last_version))

      - type: regex
        part: body
        regex:
          - '(?i)Stable.tag:\s?([\w.]+)'
# digest: 4a0a0047304502200c1597465d04778c9d2b8c14dcf1d0ba872eb0d3de559b92a9378d2af59a76ea022100ebf5a34627e9508359b9739fb7eb430a49afdfddd7c64fa6533fc7caf19dad5c:922c64590222798bb761d5b6d8e72950
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								id: wordpress-nextgen-gallery
 								info:
-												refactoring

											
										
										
											2022-12-16 21:13:03 +00:00
+								  name: WordPress Gallery Plugin – NextGEN Gallery Detection
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								  author: ricardomaia
 								  severity: info
 								  reference:
 								    - https://wordpress.org/plugins/nextgen-gallery/
 								  metadata:
-												TemplateMan Update [Mon Nov 27 09:19:41 UTC 2023] :robot:

											
										
										
											2023-11-27 09:19:41 +00:00
+								    max-request: 1
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								    plugin_namespace: nextgen-gallery
-												Removing blank lines

											
										
										
											2022-12-02 00:47:18 +00:00
+								    wpscan: https://wpscan.com/plugin/nextgen-gallery
-												refactoring

											
										
										
											2022-12-16 21:13:03 +00:00
+								  tags: tech,wordpress,wp-plugin,top-200
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
-												Refactoring the directory structure based on protocols (#7137)

* moving http templates

* updated cves.json

* moved network CVEs

* updated scripts

* updated workflows

* updated requests to http

* replaced network to tcp

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
											
										
										
											2023-04-27 04:28:59 +00:00
+								http:
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								  - method: GET
 								    path:
 								      - "{{BaseURL}}/wp-content/plugins/nextgen-gallery/readme.txt"
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
 								    payloads:
-												refactoring

											
										
										
											2022-12-16 21:13:03 +00:00
+								      last_version: helpers/wordpress/plugins/nextgen-gallery.txt
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
 								    extractors:
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								      - type: regex
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
+								        part: body
 								        internal: true
 								        name: internal_detected_version
 								        group: 1
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								        regex:
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
+								          - '(?i)Stable.tag:\s?([\w.]+)'
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								      - type: regex
 								        part: body
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
+								        name: detected_version
-												TOP 200 WordPress Plugins

											
										
										
											2022-12-01 23:29:57 +00:00
+								        group: 1
 								        regex:
 								          - '(?i)Stable.tag:\s?([\w.]+)'
-												Update wordpress plugin templates

											
										
										
											2022-12-06 09:28:42 +00:00
 								    matchers-condition: or
 								    matchers:
 								      - type: dsl
 								        name: "outdated_version"
 								        dsl:
 								          - compare_versions(internal_detected_version, concat("< ", last_version))
 								      - type: regex
 								        part: body
 								        regex:
 								          - '(?i)Stable.tag:\s?([\w.]+)'
-												Auto Template Signing [Mon Nov 27 10:10:24 UTC 2023] :robot:

											
										
										
											2023-11-27 10:10:24 +00:00
+								# digest: 4a0a0047304502200c1597465d04778c9d2b8c14dcf1d0ba872eb0d3de559b92a9378d2af59a76ea022100ebf5a34627e9508359b9739fb7eb430a49afdfddd7c64fa6533fc7caf19dad5c:922c64590222798bb761d5b6d8e72950