Added the wordpress.org plugin URL. See issue #100.

lib/wpscan/modules/wp_plugins.rb

@@ -24,7 +24,7 @@ module WpPlugins
   def plugins_from_aggressive_detection(options)
     options[:file]          = options[:file] || (options[:full] ? "#{DATA_DIR}/plugins_full.txt" : "#{DATA_DIR}/plugins.txt")
     options[:vulns_file]    = (options[:vulns_file] != nil and options[:vulns_file] != "") ?
-      options[:vulns_file] : DATA_DIR + "/plugin_vulns.xml"
+    options[:vulns_file] : DATA_DIR + "/plugin_vulns.xml"
     options[:vulns_xpath]   = "//plugin[@name='#{@name}']/vulnerability"
     options[:vulns_xpath_2] = "//plugin"
     options[:type]          = "plugins"

lib/wpscan/wp_item.rb

@@ -40,6 +40,12 @@ class WpItem < Vulnerable
     raise("type not set")           unless @type
   end
 
+  # The wordpress.org plugins directory URL
+  # See: https://github.com/wpscanteam/wpscan/issues/100
+  def wp_org_url
+    URI('http://wordpress.org/extend/plugins/').merge("#@name/")
+  end
+
   def get_sub_folder
     case @type
       when "themes"

lib/wpscan/wp_plugin.rb

@@ -19,7 +19,7 @@
 class WpPlugin < WpItem
   def initialize(options = {})
     options[:vulns_file]    = (options[:vulns_file] != nil and options[:vulns_file] != "") ?
-        options[:vulns_file] : DATA_DIR + "/plugin_vulns.xml"
+    options[:vulns_file] : DATA_DIR + "/plugin_vulns.xml"
     options[:vulns_xpath]   = "//plugin[@name='$name$']/vulnerability"
     options[:vulns_xpath_2] = "//plugin"
     options[:type]          = "plugins"

spec/lib/wpscan/wp_item_spec.rb

@@ -436,4 +436,21 @@ describe WpPlugin do
       @instance.has_changelog?.should == false
     end
   end
+
+  describe "#wp_org_url" do
+    before :each do
+      @instance = WpItem.new(
+        :base_url => "http://sub.example.com/path/to/wordpress/",
+        :path => "test/asdf.php",
+        :vulns_file => "XXX.xml",
+        :name => "test",
+        :vulns_xpath => "XX",
+        :type => "plugins"
+      )
+    end
+    
+    it "should return the correct url" do
+       @expected = "http://wordpress.org/extend/plugins/test/"  
+    end  
+  end
 end

wpscan.rb

@@ -193,9 +193,11 @@ begin
       puts "#{plugins.size} found :"
 
       plugins.each do |plugin|
+        p plugin
         puts
         puts " | Name: #{plugin.name}"
         puts " | Location: #{plugin.get_full_url}"
+        puts " | WordPress: #{plugin.wp_org_url}"
 
         plugin.vulnerabilities.each do |vulnerability|
           puts " |"