updated req and matchers

http/cves/2024/CVE-2024-6928.yaml

@@ -9,30 +9,31 @@ info:
   reference:
     - https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/opti-marketing/opti-marketing-209-unauthenticated-sql-injection
     - https://wpscan.com/vulnerability/7bb9474f-2b9d-4856-b36d-a43da3db0245/
+    - https://nvd.nist.gov/vuln/detail/cve-2024-6928
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
     cvss-score: 10
     cve-id: CVE-2024-6928
   metadata:
+    max-request: 2
     vendor: opti-marketing
     product: opti-marketing
     framework: wordpress
     publicwww-query: "/wp-content/plugins/opti-marketing"
-  tags: cve,cve2024,wpscan,wp-plugin,wordpress,opti-marketing
+  tags: cve,cve2024,wpscan,wp-plugin,wp,wordpress,opti-marketing,sqli
 
 flow: http(1) && http(2)
 
 http:
   - raw:
       - |
-        GET /wp-content/plugins/opti-marketing/readme.txt HTTP/1.1
+        GET / HTTP/1.1
         Host: {{Hostname}}
 
     matchers:
       - type: dsl
         dsl:
-          - 'contains(body,"Opti Marketing")'
+          - 'contains(body, "/wp-content/plugins/opti-marketing")'
-          - 'status_code == 200'
         condition: and
         internal: true