wpscan 3.8.28 → 4.0.0

data/app/finders/interesting_findings/duplicator_installer_log.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # DuplicatorInstallerLog finder
-      class DuplicatorInstallerLog < CMSScanner::Finders::Finder
+      class DuplicatorInstallerLog < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           path = 'installer-log.txt'

data/app/finders/interesting_findings/emergency_pwd_reset_script.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # Emergency Password Reset Script finder
-      class EmergencyPwdResetScript < CMSScanner::Finders::Finder
+      class EmergencyPwdResetScript < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           path = 'emergency.php'

data/app/finders/interesting_findings/fantastico_fileslist.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module WPScan
+  module Finders
+    module InterestingFindings
+      # FantasticoFileslist finder
+      class FantasticoFileslist < Finder
+        # @return [ InterestingFinding ]
+        def aggressive(_opts = {})
+          path = 'fantastico_fileslist.txt'
+          res  = target.head_and_get(path)
+
+          return if res.body.strip.empty?
+          return unless res.headers && res.headers['Content-Type']&.start_with?('text/plain')
+
+          WPScan::Model::FantasticoFileslist.new(target.url(path), confidence: 70, found_by: found_by)
+        end
+      end
+    end
+  end
+end

data/app/finders/interesting_findings/full_path_disclosure.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # Full Path Disclosure finder
-      class FullPathDisclosure < CMSScanner::Finders::Finder
+      class FullPathDisclosure < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           path        = 'wp-includes/rss-functions.php'

data/app/finders/interesting_findings/headers.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module WPScan
+  module Finders
+    module InterestingFindings
+      # Interesting Headers finder
+      class Headers < Finder
+        # @return [ InterestingFinding ]
+        def passive(_opts = {})
+          r = WPScan::Model::Headers.new(target.homepage_url, confidence: 100, found_by: found_by)
+
+          r.interesting_entries.empty? ? nil : r
+        end
+      end
+    end
+  end
+end

data/app/finders/interesting_findings/mu_plugins.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # Must Use Plugins Directory checker
-      class MuPlugins < CMSScanner::Finders::Finder
+      class MuPlugins < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def passive(_opts = {})
           pattern = %r{#{target.content_dir}/mu-plugins/}i

data/app/finders/interesting_findings/multisite.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # Multisite checker
-      class Multisite < CMSScanner::Finders::Finder
+      class Multisite < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           url      = target.url('wp-signup.php')

data/app/finders/interesting_findings/php_disabled.rb

@@ -4,8 +4,8 @@ module WPScan
   module Finders
     module InterestingFindings
       # See https://github.com/wpscanteam/wpscan/issues/1593
-      class PHPDisabled < CMSScanner::Finders::Finder
-        PATTERN = /\$wp_version =/.freeze
+      class PHPDisabled < WPScan::Finders::Finder
+        PATTERN = /\$wp_version =/
 
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})

data/app/finders/interesting_findings/readme.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # Readme.html finder
-      class Readme < CMSScanner::Finders::Finder
+      class Readme < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           potential_files.each do |path|

data/app/finders/interesting_findings/registration.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # Registration Enabled checker
-      class Registration < CMSScanner::Finders::Finder
+      class Registration < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def passive(_opts = {})
           # Maybe check in the homepage if there is the registration url ?

data/app/finders/interesting_findings/robots_txt.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module WPScan
+  module Finders
+    module InterestingFindings
+      # Robots.txt finder
+      class RobotsTxt < Finder
+        # @return [ InterestingFinding ]
+        def aggressive(_opts = {})
+          path = 'robots.txt'
+          res  = target.head_and_get(path)
+
+          return unless res&.code == 200 && res.body =~ /(?:user-agent|(?:dis)?allow):/i
+
+          WPScan::Model::RobotsTxt.new(target.url(path), confidence: 100, found_by: found_by)
+        end
+      end
+    end
+  end
+end

data/app/finders/interesting_findings/search_replace_db_2.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module WPScan
+  module Finders
+    module InterestingFindings
+      # SearchReplaceDB2 finder
+      class SearchReplaceDB2 < Finder
+        # @return [ InterestingFinding ]
+        def aggressive(_opts = {})
+          path = 'searchreplacedb2.php'
+
+          return unless /by interconnect/i.match?(target.head_and_get(path).body)
+
+          WPScan::Model::SearchReplaceDB2.new(target.url(path), confidence: 100, found_by: found_by)
+        end
+      end
+    end
+  end
+end

data/app/finders/interesting_findings/tmm_db_migrate.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # Tmm DB Migrate finder
-      class TmmDbMigrate < CMSScanner::Finders::Finder
+      class TmmDbMigrate < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           path = 'wp-content/uploads/tmm_db_migrate/tmm_db_migrate.zip'

data/app/finders/interesting_findings/upload_directory_listing.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # UploadDirectoryListing finder
-      class UploadDirectoryListing < CMSScanner::Finders::Finder
+      class UploadDirectoryListing < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           path = 'wp-content/uploads/'

data/app/finders/interesting_findings/upload_sql_dump.rb

@@ -4,8 +4,8 @@ module WPScan
   module Finders
     module InterestingFindings
       # UploadSQLDump finder
-      class UploadSQLDump < CMSScanner::Finders::Finder
-        SQL_PATTERN = /(?:DROP|CREATE|(?:UN)?LOCK) TABLE|INSERT INTO/.freeze
+      class UploadSQLDump < WPScan::Finders::Finder
+        SQL_PATTERN = /(?:DROP|CREATE|(?:UN)?LOCK) TABLE|INSERT INTO/
 
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})

data/app/finders/interesting_findings/wp_cron.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module InterestingFindings
       # wp-cron.php finder
-      class WPCron < CMSScanner::Finders::Finder
+      class WPCron < WPScan::Finders::Finder
         # @return [ InterestingFinding ]
         def aggressive(_opts = {})
           res = Browser.get(wp_cron_url)

data/app/finders/interesting_findings/xml_rpc.rb

@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+
+module WPScan
+  module Finders
+    module InterestingFindings
+      # XML RPC finder
+      class XMLRPC < Finder
+        # @return [ Array<String> ] The potential urls to the XMl RPC file
+        def potential_urls
+          @potential_urls ||= []
+        end
+
+        # @return [ Array<XMLRPC> ]
+        def passive(opts = {})
+          [passive_headers(opts), passive_body(opts)].compact
+        end
+
+        # @return [ XMLRPC ]
+        def passive_headers(_opts = {})
+          url = target.homepage_res.headers['X-Pingback']
+
+          return unless target.in_scope?(url)
+
+          potential_urls << url
+
+          WPScan::Model::XMLRPC.new(url, confidence: 30, found_by: 'Headers (Passive Detection)')
+        end
+
+        # @return [ XMLRPC ]
+        def passive_body(_opts = {})
+          target.homepage_res.html.css('link[rel="pingback"]').each do |tag|
+            url = tag.attribute('href').to_s
+
+            next unless target.in_scope?(url)
+
+            potential_urls << url
+
+            return WPScan::Model::XMLRPC.new(url, confidence: 30, found_by: 'Link Tag (Passive Detection)')
+          end
+          nil
+        end
+
+        # @return [ XMLRPC ]
+        def aggressive(_opts = {})
+          potential_urls << target.url('xmlrpc.php')
+
+          potential_urls.uniq.each do |potential_url|
+            next unless target.in_scope?(potential_url)
+
+            res = WPScan::Browser.post(potential_url, body: Digest::MD5.hexdigest(rand(999_999).to_s[0..5]))
+
+            next unless /<methodResponse>/i.match?(res&.body)
+
+            return WPScan::Model::XMLRPC.new(potential_url, confidence: 100, found_by: DIRECT_ACCESS)
+          end
+          nil
+        end
+      end
+    end
+  end
+end

data/app/finders/interesting_findings.rb

@@ -1,5 +1,10 @@
 # frozen_string_literal: true
 
+require_relative 'interesting_findings/headers'
+require_relative 'interesting_findings/robots_txt'
+require_relative 'interesting_findings/fantastico_fileslist'
+require_relative 'interesting_findings/search_replace_db_2'
+require_relative 'interesting_findings/xml_rpc'
 require_relative 'interesting_findings/readme'
 require_relative 'interesting_findings/wp_cron'
 require_relative 'interesting_findings/multisite'
@@ -18,18 +23,22 @@ require_relative 'interesting_findings/emergency_pwd_reset_script'
 module WPScan
   module Finders
     module InterestingFindings
-      # Interesting Files Finder
-      class Base < CMSScanner::Finders::InterestingFindings::Base
+      # Interesting Files Finder (base + WordPress-specific finders).
+      class Base
+        include IndependentFinder
+
         # @param [ WPScan::Target ] target
         def initialize(target)
-          super(target)
+          %w[Headers RobotsTxt FantasticoFileslist SearchReplaceDB2 XMLRPC].each do |f|
+            finders << WPScan::Finders::InterestingFindings.const_get(f).new(target)
+          end
 
           %w[
             Readme DebugLog FullPathDisclosure BackupDB DuplicatorInstallerLog
             Multisite MuPlugins Registration UploadDirectoryListing TmmDbMigrate
             UploadSQLDump EmergencyPwdResetScript WPCron PHPDisabled
           ].each do |f|
-            finders << InterestingFindings.const_get(f).new(target)
+            finders << WPScan::Finders::InterestingFindings.const_get(f).new(target)
           end
         end
       end

data/app/finders/main_theme/css_style_in_homepage.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module MainTheme
       # From the CSS style in the homepage
-      class CssStyleInHomepage < CMSScanner::Finders::Finder
+      class CssStyleInHomepage < WPScan::Finders::Finder
         include Finders::WpItems::UrlsInPage # To have the item_code_pattern method available here
 
         def create_theme(slug, style_url, opts)

data/app/finders/main_theme/urls_in_homepage.rb

@@ -4,22 +4,18 @@ module WPScan
   module Finders
     module MainTheme
       # URLs In Homepage Finder
-      class UrlsInHomepage < CMSScanner::Finders::Finder
+      class UrlsInHomepage < WPScan::Finders::Finder
         include WpItems::UrlsInPage
 
         # @param [ Hash ] opts
         #
         # @return [ Array<Theme> ]
         def passive(opts = {})
-          found = []
-
           slugs = items_from_links('themes', uniq: false) + items_from_codes('themes', uniq: false)
 
-          slugs.each_with_object(Hash.new(0)) { |slug, counts| counts[slug] += 1 }.each do |slug, occurences|
-            found << Model::Theme.new(slug, target, opts.merge(found_by: found_by, confidence: 2 * occurences))
+          slugs.tally.map do |slug, occurences|
+            Model::Theme.new(slug, target, opts.merge(found_by: found_by, confidence: 2 * occurences))
           end
-
-          found
         end
 
         # @return [ Typhoeus::Response ]

data/app/finders/main_theme/woo_framework_meta_generator.rb

@@ -4,10 +4,10 @@ module WPScan
   module Finders
     module MainTheme
       # From the WooFramework meta generators
-      class WooFrameworkMetaGenerator < CMSScanner::Finders::Finder
-        THEME_PATTERN     = %r{<meta name="generator" content="([^\s"]+)\s?([^"]+)?"\s+/?>}.freeze
-        FRAMEWORK_PATTERN = %r{<meta name="generator" content="WooFramework\s?([^"]+)?"\s+/?>}.freeze
-        PATTERN           = /#{THEME_PATTERN}\s+#{FRAMEWORK_PATTERN}/i.freeze
+      class WooFrameworkMetaGenerator < WPScan::Finders::Finder
+        THEME_PATTERN     = %r{<meta name="generator" content="([^\s"]+)\s?([^"]+)?"\s+/?>}
+        FRAMEWORK_PATTERN = %r{<meta name="generator" content="WooFramework\s?([^"]+)?"\s+/?>}
+        PATTERN           = /#{THEME_PATTERN}\s+#{FRAMEWORK_PATTERN}/i
 
         def passive(opts = {})
           return unless target.homepage_res.body =~ PATTERN || target.error_404_res.body =~ PATTERN

data/app/finders/main_theme.rb

@@ -11,7 +11,7 @@ module WPScan
     module MainTheme
       # Main Theme Finder
       class Base
-        include CMSScanner::Finders::UniqueFinder
+        include WPScan::Finders::UniqueFinder
 
         # @param [ WPScan::Target ] target
         def initialize(target)

data/app/finders/medias/attachment_brute_forcing.rb

@@ -4,8 +4,8 @@ module WPScan
   module Finders
     module Medias
       # Medias Finder, see https://github.com/wpscanteam/wpscan/issues/172
-      class AttachmentBruteForcing < CMSScanner::Finders::Finder
-        include CMSScanner::Finders::Finder::Enumerator
+      class AttachmentBruteForcing < WPScan::Finders::Finder
+        include WPScan::Finders::Finder::Enumerator
 
         # @param [ Hash ] opts
         # @option opts [ Range ] :range Mandatory

data/app/finders/medias.rb

@@ -7,7 +7,7 @@ module WPScan
     module Medias
       # Medias Finder
       class Base
-        include CMSScanner::Finders::SameTypeFinder
+        include WPScan::Finders::SameTypeFinder
 
         # @param [ WPScan::Target ] target
         def initialize(target)

data/app/finders/passwords/wp_login.rb

@@ -4,8 +4,8 @@ module WPScan
   module Finders
     module Passwords
       # Password attack against the wp-login.php
-      class WpLogin < CMSScanner::Finders::Finder
-        include CMSScanner::Finders::Finder::BreadthFirstDictionaryAttack
+      class WpLogin < WPScan::Finders::Finder
+        include WPScan::Finders::Finder::BreadthFirstDictionaryAttack
 
         def login_request(username, password)
           target.login_request(username, password)

data/app/finders/passwords/xml_rpc.rb

@@ -4,8 +4,8 @@ module WPScan
   module Finders
     module Passwords
       # Password attack against the XMLRPC interface
-      class XMLRPC < CMSScanner::Finders::Finder
-        include CMSScanner::Finders::Finder::BreadthFirstDictionaryAttack
+      class XMLRPC < WPScan::Finders::Finder
+        include WPScan::Finders::Finder::BreadthFirstDictionaryAttack
 
         def login_request(username, password)
           target.method_call('wp.getUsersBlogs', [username, password], cache_ttl: 0)

data/app/finders/passwords/xml_rpc_multicall.rb

@@ -5,7 +5,7 @@ module WPScan
     module Passwords
       # Password attack against the XMLRPC interface with the multicall method
       # WP < 4.4 is vulnerable to such attack
-      class XMLRPCMulticall < CMSScanner::Finders::Finder
+      class XMLRPCMulticall < WPScan::Finders::Finder
         # @param [ Array<User> ] users
         # @param [ Array<String> ] passwords
         #

data/app/finders/plugin_version/readme.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module PluginVersion
       # Plugin Version Finder from the readme.txt file
-      class Readme < CMSScanner::Finders::Finder
+      class Readme < WPScan::Finders::Finder
         # @return [ Version ]
         def aggressive(_opts = {})
           found_by_msg = 'Readme - %s (Aggressive Detection)'

data/app/finders/plugin_version.rb

@@ -7,7 +7,7 @@ module WPScan
     module PluginVersion
       # Plugin Version Finder
       class Base
-        include CMSScanner::Finders::UniqueFinder
+        include WPScan::Finders::UniqueFinder
 
         # @param [ Model::Plugin ] plugin
         def initialize(plugin)

data/app/finders/plugins/known_locations.rb

@@ -4,8 +4,8 @@ module WPScan
   module Finders
     module Plugins
       # Known Locations Plugins Finder
-      class KnownLocations < CMSScanner::Finders::Finder
-        include CMSScanner::Finders::Finder::Enumerator
+      class KnownLocations < WPScan::Finders::Finder
+        include WPScan::Finders::Finder::Enumerator
 
         # @return [ Array<Integer> ]
         def valid_response_codes
@@ -14,22 +14,32 @@ module WPScan
 
         # @param [ Hash ] opts
         # @option opts [ String ] :list
+        # @option opts [ Findings ] :found Shared findings collection passed by
+        #   BaseFinders#run_finder. We append directly into it as each plugin
+        #   is detected so that Findings#on_append fires during the hydra run,
+        #   enabling streaming output. Falls back to a local array when called
+        #   outside the framework (e.g. directly from specs).
         #
-        # @return [ Array<Plugin> ]
+        # @return [ Array<Plugin> ] Items appended this call (empty when
+        #   already streamed into opts[:found] to avoid double-appending).
         def aggressive(opts = {})
-          found = []
+          shared = opts[:found]
+          local  = shared ? nil : []
+          count  = 0
 
           enumerate(target_urls(opts), opts.merge(check_full_response: true)) do |res, slug|
             finding_opts = opts.merge(found_by: found_by,
                                       confidence: 80,
                                       interesting_entries: ["#{res.effective_url}, status: #{res.code}"])
 
-            found << Model::Plugin.new(slug, target, finding_opts)
+            plugin = Model::Plugin.new(slug, target, finding_opts)
+            (shared || local) << plugin
+            count += 1
 
-            raise Error::PluginsThresholdReached if opts[:threshold].positive? && found.size >= opts[:threshold]
+            raise Error::PluginsThresholdReached if opts[:threshold].positive? && count >= opts[:threshold]
           end
 
-          found
+          local || []
         end
 
         # @param [ Hash ] opts

data/app/finders/plugins/urls_in_homepage.rb

@@ -5,20 +5,16 @@ module WPScan
     module Plugins
       # URLs In Homepage Finder
       # Typically, the items detected from URLs like /wp-content/plugins/<slug>/
-      class UrlsInHomepage < CMSScanner::Finders::Finder
+      class UrlsInHomepage < WPScan::Finders::Finder
         include WpItems::UrlsInPage
 
         # @param [ Hash ] opts
         #
         # @return [ Array<Plugin> ]
         def passive(opts = {})
-          found = []
-
-          (items_from_links('plugins') + items_from_codes('plugins')).uniq.sort.each do |slug|
-            found << Model::Plugin.new(slug, target, opts.merge(found_by: found_by, confidence: 80))
+          (items_from_links('plugins') + items_from_codes('plugins')).uniq.sort.map do |slug|
+            Model::Plugin.new(slug, target, opts.merge(found_by: found_by, confidence: 80))
           end
-
-          found
         end
 
         # @return [ Typhoeus::Response ]

data/app/finders/plugins/wp_json_api.rb

@@ -0,0 +1,85 @@
+# frozen_string_literal: true
+
+module WPScan
+  module Finders
+    module Plugins
+      # Authenticated plugin inventory via the WordPress REST API
+      # endpoint /wp-json/wp/v2/plugins (WP >= 5.5).
+      #
+      # Requires admin credentials with the install_plugins / activate_plugins
+      # capability. An Application Password (WP >= 5.6) is the recommended
+      # secret as it bypasses 2FA and is colon-free by construction.
+      class WpJsonApi < WPScan::Finders::Finder
+        FOUND_BY = 'WP REST API (Authenticated)'
+
+        # @param [ Hash ] opts
+        # @option opts [ String ] :userpwd "user:password" credentials for Basic Auth
+        #
+        # @return [ Array<Model::Plugin> ]
+        def aggressive(opts = {})
+          response = Browser.get(api_url, userpwd: opts[:userpwd], headers: { 'Accept' => 'application/json' })
+
+          raise Error::WpAuthFailed.new(response.code, api_url) if [401, 403].include?(response.code)
+          raise Error::WpAuthEndpointUnavailable.new(response.code, api_url) unless response.code == 200
+
+          plugins_from_response(response)
+        rescue JSON::ParserError, TypeError
+          []
+        end
+
+        # @param [ Typhoeus::Response ] response
+        #
+        # @return [ Array<Model::Plugin> ]
+        def plugins_from_response(response)
+          json = JSON.parse(response.body)
+          return [] unless json.is_a?(Enumerable)
+
+          json.filter_map { |entry| build_plugin(entry, response.effective_url) }
+        end
+
+        # @return [ String ] The REST API URL for the plugins endpoint
+        def api_url
+          @api_url ||= target.url('wp-json/wp/v2/plugins')
+        end
+
+        private
+
+        # @param [ Hash ] entry
+        # @param [ String ] effective_url
+        #
+        # @return [ Model::Plugin, nil ]
+        def build_plugin(entry, effective_url)
+          slug = slug_from_entry(entry)
+          return nil if slug.nil? || slug.empty?
+
+          plugin = Model::Plugin.new(
+            slug,
+            target,
+            confidence: 100,
+            found_by: FOUND_BY,
+            interesting_entries: [effective_url]
+          )
+
+          version = entry['version']
+          plugin.instance_variable_set(
+            :@version,
+            version && !version.to_s.empty? ? Model::Version.new(version, confidence: 100, found_by: FOUND_BY) : false
+          )
+
+          plugin
+        end
+
+        # @param [ Hash ] entry
+        #
+        # @return [ String, nil ]
+        # WP REST returns "plugin" as e.g. "akismet/akismet" or just "hello" for the legacy single-file plugin.
+        def slug_from_entry(entry)
+          raw = entry['plugin'] || entry['textdomain']
+          return nil unless raw.is_a?(String)
+
+          raw.split('/').first
+        end
+      end
+    end
+  end
+end

data/app/finders/plugins.rb

@@ -11,13 +11,14 @@ require_relative 'plugins/body_pattern'
 require_relative 'plugins/javascript_var'
 require_relative 'plugins/query_parameter'
 require_relative 'plugins/config_parser' # Not loaded below as not implemented
+require_relative 'plugins/wp_json_api'   # Authenticated, used by AuthenticatedInventory controller
 
 module WPScan
   module Finders
     module Plugins
       # Plugins Finder
       class Base
-        include CMSScanner::Finders::SameTypeFinder
+        include WPScan::Finders::SameTypeFinder
 
         # @param [ WPScan::Target ] target
         def initialize(target)

data/app/finders/theme_version/style.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module ThemeVersion
       # Theme Version Finder from the style.css file
-      class Style < CMSScanner::Finders::Finder
+      class Style < WPScan::Finders::Finder
         # @param [ Hash ] opts
         #
         # @return [ Version ]

data/app/finders/theme_version/woo_framework_meta_generator.rb

@@ -4,7 +4,7 @@ module WPScan
   module Finders
     module ThemeVersion
       # Theme Version Finder from the WooFramework generators
-      class WooFrameworkMetaGenerator < CMSScanner::Finders::Finder
+      class WooFrameworkMetaGenerator < WPScan::Finders::Finder
         # @param [ Hash ] opts
         #
         # @return [ Version ]

data/app/finders/theme_version.rb

@@ -8,7 +8,7 @@ module WPScan
     module ThemeVersion
       # Theme Version Finder
       class Base
-        include CMSScanner::Finders::UniqueFinder
+        include WPScan::Finders::UniqueFinder
 
         # @param [ Model::Theme ] theme
         def initialize(theme)