metadata - update

http/cves/2017/CVE-2017-18487.yaml

@@ -16,7 +16,8 @@ info:
   metadata:
     max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/adsense-plugin/"
+  tags: cve,cve2017,wordpress,wpscan,wp-plugin,xss,bws-adpush,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18490.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18490
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/contact-form-multi/"
+  tags: cve,cve2017,wordpress,bws-contact-form,wpscan,wp-plugin,xss,authenticated,contact-form-multi
 
 http:
   - raw:

http/cves/2017/CVE-2017-18491.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18491
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/contact-form-plugin/"
+  tags: cve,cve2017,wordpress,bws,contact-form,wpscan,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18492.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18492
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/contact-form-to-db/"
+  tags: cve,cve2017,wordpress,wpscan,bws-contact-form,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18493.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18493
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/custom-admin-page/"
+  tags: cve,cve2017,wordpress,bws-adminpage,wpscan,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18494.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18494
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/custom-search-plugin/"
+  tags: cve,cve2017,wordpress,bws-custom-search,wpscan,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18496.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18496
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/htaccess/"
+  tags: cve,cve2017,wordpress,wpscan,bws-htaccess,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18500.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18500
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/social-buttons-pack/"
+  tags: cve,cve2017,wordpress,wpscan,bws-social-buttons,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18501.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18501
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwwww-query: "/wp-content/plugins/social-login-bws/"
+  tags: cve,cve2017,wordpress,wpscan,bws-social-login,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18502.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18502
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/subscriber/"
+  tags: cve,cve2017,wordpress,wpscan,bws-subscribers,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18505.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18505
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/twitter-plugin/"
+  tags: cve,cve2017,wordpress,wpscan,bws-twitter,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18516.yaml

@@ -6,6 +6,7 @@ info:
   severity: medium
   description: |
     The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
+  remediation: Fixed in version 1.0.5
   reference:
     - https://wpscan.com/vulnerability/efd816c3-90d4-40bf-850a-0e4c1a756694
     - https://nvd.nist.gov/vuln/detail/CVE-2017-18516
@@ -14,9 +15,10 @@ info:
   classification:
     cve-id: CVE-2017-18516
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/bws-linkedin/"
+  tags: cve,cve2017,wordpress,wp-plugin,wpscan,bws-linkedin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18517.yaml

@@ -6,6 +6,7 @@ info:
   severity: medium
   description: |
     The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
+  remediation: Fixed in version 1.0.5
   reference:
     - https://wpscan.com/vulnerability/efd816c3-90d4-40bf-850a-0e4c1a756694
     - https://nvd.nist.gov/vuln/detail/CVE-2017-18517
@@ -16,7 +17,8 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/bws-pinterest/"
+  tags: cve,cve2017,wordpress,wpscan,bws-pinterest,wp-plugin,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18518.yaml

@@ -6,6 +6,7 @@ info:
   severity: medium
   description: |
     The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
+  remediation: Fixed in version 1.1.0
   reference:
     - https://wpscan.com/vulnerability/efd816c3-90d4-40bf-850a-0e4c1a756694
     - https://nvd.nist.gov/vuln/detail/CVE-2017-18518
@@ -16,7 +17,8 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwwww-query: "/wp-content/plugins/bws-smtp/"
+  tags: cve,cve2017,wordpress,wp-plugin,wpscan,bws-smtp,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18527.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18527
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/pagination/" 
+  tags: cve,cve2017,wordpress,wp-plugin,wpscan,bws-pagination,bws-xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18528.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18528
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicewww-query: "/wp-content/plugins/pdf-print/"
+  tags: cve,cve2017,wordpress,wp-plugin,bws-pdf-print,wpscan,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18529.yaml

@@ -16,7 +16,8 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/promobar/"
+  tags: cve,cve2017,wordpress,wp-plugin,bws-promobar,wpscan,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18530.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18530
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/rating-bws/"
+  tags: cve,cve2017,wordpress,wp-plugin,bws-rating,wpscan,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18532.yaml

@@ -16,7 +16,8 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/realty/"
+  tags: cve,cve2017,wordpress,wp-plugin,bws-realty,wpscan,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18537.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18537
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicewww-query: "/wp-content/plugins/visitors-online/"
+  tags: cve,cve2017,wordpress,wp-plugin,bws-visitors-online,wpscan,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18542.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18542
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/zendesk-help-center/"
+  tags: cve,cve2017,wordpress,wp-plugin,bws-zendesk,wpscan,xss,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18556.yaml

@@ -6,6 +6,7 @@ info:
   severity: medium
   description: |
     The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
+  remediation: Fixed in version 1.7.1 
   reference:
     - https://wpscan.com/vulnerability/efd816c3-90d4-40bf-850a-0e4c1a756694
     - https://nvd.nist.gov/vuln/detail/CVE-2017-18556
@@ -14,9 +15,10 @@ info:
   classification:
     cve-id: CVE-2017-18556
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/bws-google-analytics/"
+  tags: cve,cve2017,wordpress,wp-plugin,xss,bws-google-analytics,wpscan,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18557.yaml

@@ -6,6 +6,7 @@ info:
   severity: medium
   description: |
     The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
+  remediation: Fixed in version 1.3.6
   reference:
     - https://wpscan.com/vulnerability/efd816c3-90d4-40bf-850a-0e4c1a756694
     - https://nvd.nist.gov/vuln/detail/CVE-2017-18557
@@ -14,9 +15,10 @@ info:
   classification:
     cve-id: CVE-2017-18557
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/bws-google-maps/"
+  tags: cve,cve2017,wordpress,wp-plugin,xss,bws-google-maps,wpscan,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18558.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18558
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/bws-testimonials/"
+  tags: cve,cve2017,wordpress,wp-plugin,xss,bws-testimonials,wpscan,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18562.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18562
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/error-log-viewer/"
+  tags: cve,cve2017,wordpress,wp-plugin,xss,bws-error-log,wpscan,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18564.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18564
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/sender/"
+  tags: cve,cve2017,wordpress,wp-plugin,xss,bws-sender,wpscan,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18565.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18565
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/updater/"
+  tags: cve,cve2017,wordpress,wp-plugin,xss,bws-updater,wpscan,authenticated
 
 http:
   - raw:

http/cves/2017/CVE-2017-18566.yaml

@@ -14,9 +14,10 @@ info:
   classification:
     cve-id: CVE-2017-18566
   metadata:
-    max-request: 2
+    max-request: 3
     verified: true
-  tags: cve,cve2017,wordpress,wp-plugin,xss,authenticated
+    publicwww-query: "/wp-content/plugins/user-role/"
+  tags: cve,cve2017,wordpress,wp-plugin,xss,bws-user-role,wpscan,authenticated
 
 http:
   - raw: