id: wp-bricks-builder-theme

info:
  name: WordPress Bricks Builder Theme Version
  author: Anonymous
  severity: info
  description: |
    - Checks for Bricks Builder Theme versions.
  reference:
    - https://0day.today/exploit/description/39489
  classification:
    cpe: cpe:2.3:a:bricksbuilder:bricks:*:*:*:*:wordpress:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: bricksbuilder
    product: bricks
    publicwww-query: "/wp-content/themes/bricks/"
  tags: wordpress,theme,wp-theme,wp,bricks

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/themes/bricks/readme.txt"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Bricks - Visual Website Builder"

      - type: regex
        part: body
        regex:
          - "Stable tag:([ 0-9.]+)"

      - type: status
        status:
          - 200
# digest: 490a00463044022053bbf7a60f45f49f96e303cef4d0ced78f54c24452615f5c0d85f08d38ad8b60022017c1791094d2d2ab1f87ad1a54af563d3826e5502ce58dcacfa1400d0e3cb895:922c64590222798bb761d5b6d8e72950