diff --git a/cves/2016/CVE-2016-10940.yaml b/cves/2016/CVE-2016-10940.yaml
index 304ee91772..3742ee1337 100644
--- a/cves/2016/CVE-2016-10940.yaml
+++ b/cves/2016/CVE-2016-10940.yaml
@@ -7,6 +7,7 @@ info:
   description: The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.
   reference:
     - https://wpscan.com/vulnerability/c0cbd314-0f4f-47db-911d-9b2e974bd0f6
+    - https://lenonleite.com.br/en/2016/12/16/zm-gallery-1-plugin-wordpress-blind-injection/
     - https://nvd.nist.gov/vuln/detail/CVE-2016-10940
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
@@ -39,7 +40,8 @@ requests:
           - "ZM Gallery Plugin"
           - "XPATH syntax error"
           - "EXTRACTVALUE("
+        condition: and
 
       - type: status
         status:
-          - 200
\ No newline at end of file
+          - 200