diff --git a/app/finders/plugin_version/readme.rb b/app/finders/plugin_version/readme.rb index 39125d8d..122971e4 100644 --- a/app/finders/plugin_version/readme.rb +++ b/app/finders/plugin_version/readme.rb @@ -59,7 +59,7 @@ module WPScan # # @return [ String, nil ] The best version number detected from the changelog section def from_changelog_section(body) - extracted_versions = body.scan(/=+\s+(?:v(?:ersion)?\s*)?([0-9.-]+)[^=]*=+[\r\n]/i) + extracted_versions = body.scan(/^=+\s+(?:v(?:ersion)?\s*)?([0-9.-]+)[^=]*=+$/i) return if extracted_versions.nil? || extracted_versions.empty? diff --git a/spec/fixtures/finders/plugin_version/readme/no_version.txt b/spec/fixtures/finders/plugin_version/readme/no_version.txt index 9f9d4c7c..367bee22 100644 --- a/spec/fixtures/finders/plugin_version/readme/no_version.txt +++ b/spec/fixtures/finders/plugin_version/readme/no_version.txt @@ -31,6 +31,14 @@ Install via the WordPress admin or... == Frequently Asked Questions == +== test == +1.2 +== + +== test == +1.3 +bb = + = I got locked out, what do I do? = Simple answer: wait. The lockdown will clear in the time you specified, just visit the site again later.