wpscan 3.8.19 → 3.8.22

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a2b3e70edcacc1f1b15ffab1fa686732b1cfc9b6aa4346bd88e0e517082c7aec
-  data.tar.gz: fb794ab8574c5e1fa66553a7e954eaa5467ed62943ae68407124e6396e9359a4
+  metadata.gz: c510fa42904154d92ab0517e7d80861d55230eccd33f1fcd05bac579f59e0ff4
+  data.tar.gz: bb32077f76c587b13f9050dc148a8214072c08c71cba0a5220841c371c8ac5a1
 SHA512:
-  metadata.gz: 0b02409d2b49a831960a39aaca578aadb07bf1390f6ced4a91edc8e2be42f05287883213cedf2df279f5b763213d595c26defe1abc0f4f075cfc3e9a7a028e03
-  data.tar.gz: 7857de71dd8d276a150afb3f69a4e184cf9e7cd3d9b4ba61a058af1dad92e98594c154246fe7ded7a21ca84bc4ecba885a1ae3d4fb883b9449fb016ab10195fe
+  metadata.gz: 8b46eca5d03d59cdb0cc5a2ca18420564b6d9ba4dede5246da955206f24570001f5045280dfa7283f47d202c444a6f128e2dde5c618e97d68183d9f72ac4a9c0
+  data.tar.gz: 1b9c59b135c53555e18cf4bd6d97f17b8cac2d688253c770578b5c23c589384d66dfd4ebdee26964223344977e6bef936f42693af26f981da3333377d88d4c1b

data/app/finders/plugin_version/readme.rb

@@ -59,13 +59,13 @@ module WPScan
         #
         # @return [ String, nil ] The best version number detected from the changelog section
         def from_changelog_section(body)
-          extracted_versions = body.scan(%r{=+\s+(?:v(?:ersion)?\s*)?([0-9.-]+)[ \ta-z0-9().\-/]*=+}i)
+          extracted_versions = body.scan(/^=+\s+(?:v(?:ersion)?\s*)?([0-9.-]+)[^=]*=+$/i)
 
           return if extracted_versions.nil? || extracted_versions.empty?
 
           extracted_versions.flatten!
           # must contain at least one number
-          extracted_versions = extracted_versions.select { |x| x =~ /[0-9]+/ }
+          extracted_versions = extracted_versions.grep(/[0-9]+/)
 
           sorted = extracted_versions.sort do |x, y|
             Gem::Version.new(x) <=> Gem::Version.new(y)

data/lib/wpscan/db/updater.rb

@@ -24,6 +24,10 @@ module WPScan
 
         FileUtils.mkdir_p(repo_directory.to_s) unless Dir.exist?(repo_directory.to_s)
 
+        # When --no-update is passed, return to avoid raising an error if the directory is not writable
+        # Mainly there for Homebrew: https://github.com/wpscanteam/wpscan/pull/1455
+        return if ParsedCli.update == false
+
         unless repo_directory.writable?
           raise "#{repo_directory} is not writable (uid: #{Process.uid}, gid: #{Process.gid})"
         end
@@ -131,7 +135,7 @@ module WPScan
         res = Typhoeus.get(file_url, request_params)
         raise Error::Download, res if res.timed_out? || res.code != 200
 
-        File.open(file_path, 'wb') { |f| f.write(res.body) }
+        File.binwrite(file_path, res.body)
 
         local_file_checksum(filename)
       end

data/lib/wpscan/version.rb

@@ -2,5 +2,5 @@
 
 # Version
 module WPScan
-  VERSION = '3.8.19'
+  VERSION = '3.8.22'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: wpscan
 version: !ruby/object:Gem::Version
-  version: 3.8.19
+  version: 3.8.22
 platform: ruby
 authors:
 - WPScanTeam
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-09-22 00:00:00.000000000 Z
+date: 2022-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cms_scanner
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.13.6
+        version: 0.13.8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.13.6
+        version: 0.13.8
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -72,14 +72,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.10.0
+        version: 3.11.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.10.0
+        version: 3.11.0
 - !ruby/object:Gem::Dependency
   name: rspec-its
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.21.0
+        version: 1.26.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.21.0
+        version: 1.26.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.13.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.13.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -170,14 +170,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.13.0
+        version: 3.14.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.13.0
+        version: 3.14.0
 description: WPScan is a black box WordPress vulnerability scanner.
 email:
 - contact@wpscan.com