Changeset 2452843

Timestamp:

01/08/2021 08:22:15 PM (5 years ago)

Author:

ethicalhack3r

Message:

New 1.14.1 version release

Location:

wpscan

Files:

• tags/1.14.1 (copied) (copied from wpscan/trunk)
• tags/1.14.1/readme.txt (modified) (2 diffs)
• tags/1.14.1/security-checks/weak-passwords/check.php (modified) (2 diffs)
• tags/1.14.1/wpscan.php (modified) (1 diff)
• trunk/readme.txt (modified) (2 diffs)
• trunk/security-checks/weak-passwords/check.php (modified) (2 diffs)
• trunk/wpscan.php (modified) (1 diff)

wpscan/tags/1.14.1/readme.txt

@@ -4 +4 @@
 Requires at least: 3.4
 Tested up to: 5.6
-Stable tag: 1.14
+Stable tag: 1.14.1
 Requires PHP: 5.5
 License: GPLv3
@@ -78 +78 @@
 
 == Changelog ==
+
+= 1.14.1 =
+
+* Use the wp_check_password() function to check for weak passwords
 
 = 1.14 =

wpscan/tags/1.14.1/security-checks/weak-passwords/check.php

@@ -70 +70 @@
       
       foreach ( $passwords as $password ) {
-        $login = wp_authenticate( $username, $password );
-
-        if ( 'WP_User' ===  get_class( $login ) ) {
+        if ( wp_check_password( $password, $user->data->user_pass, $user->ID ) ) {
           array_push( $found, $username );
           break;
@@ -81 +79 @@
     if ( ! empty( $found ) ) {
         if ( 1 === count( $found ) ) {
-          $text = __( 'The ' . esc_html( $found[0] ) . ' user was found to have a weak password. The user\'s password should be updated immediately', 'wpscan' );
+          $text = sprintf(
+            __( 'The %s user was found to have a weak password. The user\'s password should be updated immediately', 'wpscan' ),
+            esc_html( $found[0] )
+          );
         } else {
           $found = implode( ', ', $found );
-          $text  = __( 'The ' . esc_html( $found ) . ' users were found to have weak passwords. The users\' passwords should be updated immediately', 'wpscan' );
+          $text  = sprintf(
+            __( 'The %s users were found to have weak passwords. The users\' passwords should be updated immediately', 'wpscan' ),
+            esc_html( $found )
+          );
         }
 

wpscan/tags/1.14.1/wpscan.php

@@ -4 +4 @@
  * Plugin URI:    http://wordpress.org/plugins/wpscan/
  * Description:   WPScan WordPress Security Scanner. Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.
- * Version:       1.14
+ * Version:       1.14.1
  * Author:        WPScan Team
  * Author URI:    https://wpscan.com/

wpscan/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 3.4
 Tested up to: 5.6
-Stable tag: 1.14
+Stable tag: 1.14.1
 Requires PHP: 5.5
 License: GPLv3
@@ -78 +78 @@
 
 == Changelog ==
+
+= 1.14.1 =
+
+* Use the wp_check_password() function to check for weak passwords
 
 = 1.14 =

wpscan/trunk/security-checks/weak-passwords/check.php

@@ -70 +70 @@
       
       foreach ( $passwords as $password ) {
-        $login = wp_authenticate( $username, $password );
-
-        if ( 'WP_User' ===  get_class( $login ) ) {
+        if ( wp_check_password( $password, $user->data->user_pass, $user->ID ) ) {
           array_push( $found, $username );
           break;
@@ -81 +79 @@
     if ( ! empty( $found ) ) {
         if ( 1 === count( $found ) ) {
-          $text = __( 'The ' . esc_html( $found[0] ) . ' user was found to have a weak password. The user\'s password should be updated immediately', 'wpscan' );
+          $text = sprintf(
+            __( 'The %s user was found to have a weak password. The user\'s password should be updated immediately', 'wpscan' ),
+            esc_html( $found[0] )
+          );
         } else {
           $found = implode( ', ', $found );
-          $text  = __( 'The ' . esc_html( $found ) . ' users were found to have weak passwords. The users\' passwords should be updated immediately', 'wpscan' );
+          $text  = sprintf(
+            __( 'The %s users were found to have weak passwords. The users\' passwords should be updated immediately', 'wpscan' ),
+            esc_html( $found )
+          );
         }
 

wpscan/trunk/wpscan.php

@@ -4 +4 @@
  * Plugin URI:    http://wordpress.org/plugins/wpscan/
  * Description:   WPScan WordPress Security Scanner. Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.
- * Version:       1.14
+ * Version:       1.14.1
  * Author:        WPScan Team
  * Author URI:    https://wpscan.com/