Version of SearchWP is not detected #1908
Description
When scanning a website with the SearchWP premium plugin installed, the version is not detected and yields results such as the following:
$ docker run -it --rm wpscanteam/wpscan --url https://domain.com--api-token [token]
[+] searchwp
| Location: https://domain.com/wp-content/plugins/searchwp/
|
| Found By: Urls In Homepage (Passive Detection)
|
| [!] 1 vulnerability identified:
|
| [!] Title: SearchWP < 4.2.6 - Subscriber+ Settings Update
| Fixed in: 4.2.6
| References:
| - https://wpscan.com/vulnerability/76213afe-8521-4751-8125-308daa136e24
| - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40223
|
| The version could not be determined.
After doing a bit of research, it seems there is a pretty reliable (aggressive) method to check the version via GET request to /wp-content/plugins/searchwp/languages/searchwp.pot. Sample is below:
$ curl -s https://domain.com/wp-content/plugins/searchwp/languages/searchwp.pot | grep 'Project-Id-Version: SearchWP'
"Project-Id-Version: SearchWP 4.3.16\n"