misc changes

vulnerabilities/wordpress/wordpress-redirection-listing.yaml

@@ -12,12 +12,15 @@ requests:
   - method: GET
     path:
       - "{{BaseURL}}/wp-content/plugins/redirection/"
+
     matchers-condition: and
     matchers:
       - type: word
         words:
           - "Index of"
           - "/wp-content/plugins/redirection/"
+        condition: and
+
       - type: status
         status:
           - 200

vulnerabilities/wordpress/wordpress-updraftplus-pem-key.yaml

@@ -11,6 +11,7 @@ requests:
   - method: GET
     path:
       - '{{BaseURL}}/wp-content/plugins/updraftplus/includes/'
+
     matchers-condition: and
     matchers:
       - type: word
@@ -20,6 +21,7 @@ requests:
           - "updraftplus"
         condition: and
         part: body
+
       - type: status
         status:
           - 200

vulnerabilities/wordpress/wpmudev-my-calender-xss.yaml

@@ -10,14 +10,20 @@ info:
 requests:
   - method: GET
     path:
-      - '{{BaseURL}}/?rsd=%27%3E%3Csvg%2Fonload%3Dconfirm(%2FOPENBUGBOUNTY%2F)%3E'
+      - '{{BaseURL}}/?rsd=%27%3E%3Csvg%2Fonload%3Dconfirm(%2F{{randstr}}%2F)%3E'
+
     matchers-condition: and
     matchers:
       - type: word
         words:
-          - "<svg/onload=confirm(/NUCLEI/)>"
-        condition: and
+          - "<svg/onload=confirm(/{{randstr}}/)>"
         part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
       - type: status
         status:
           - 200