id: wp-bricks-builder-theme

info:
  name: WordPress Bricks Builder Theme Version
  author: Anonymous
  severity: info
  description: |
    - Checks for Bricks Builder Theme versions.
  reference:
    - https://0day.today/exploit/description/39489
  classification:
    cpe: cpe:2.3:a:bricksbuilder:bricks:*:*:*:*:wordpress:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: bricksbuilder
    product: bricks
    publicwww-query: "/wp-content/themes/bricks/"
  tags: wordpress,theme,wp-theme,wp,bricks

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/themes/bricks/readme.txt"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Bricks - Visual Website Builder"

      - type: regex
        part: body
        regex:
          - "Stable tag:([ 0-9.]+)"

      - type: status
        status:
          - 200
# digest: 490a00463044022041941121314b89314b6cb298f457ad434699dc64c23c7a6e030713bcd7e134bd02202cd80c9807e7b8798bef920229df191054133891087055c4ede9e0afbd8be245:922c64590222798bb761d5b6d8e72950