v3.8.27

What's Changed

• Fixed various warnings with Ruby 3.3 by @erwanlr in #1858

Full Changelog: v3.8.26...v3.8.27

v3.8.26

What's Changed

• Re-add ruby 3.2 to build by @alexsanford in #1803
• README: Inline to code block for macOS download by @devidw in #1711
• Fixed #1759 by @0n1shi in #1787
• Fix case where a theme slug is all non-latin characters by @alexsanford in #1814
• Updates DFs by @erwanlr in #1820
• Bump docker/login-action from 2.2.0 to 3.0.0 by @dependabot in #1807
• Bump docker/build-push-action from 4 to 5 by @dependabot in #1805
• Bump docker/setup-buildx-action from 2 to 3 by @dependabot in #1804
• Bump docker/setup-qemu-action from 2 to 3 by @dependabot in #1806
• Update simplecov requirement from ~> 0.21.0 to ~> 0.22.0 by @dependabot in #1765
• Updates Deps by @erwanlr in #1854
• Populate valid versions from metadata, too by @Nirusu in #1850
• Bump docker/build-push-action from 5 to 6 by @dependabot in #1857
• Bump docker/login-action from 3.0.0 to 3.3.0 by @dependabot in #1856
• Updates cms-scanner dep by @erwanlr in #1855

New Contributors

• @alexsanford made their first contribution in #1803
• @devidw made their first contribution in #1711
• @0n1shi made their first contribution in #1787
• @Nirusu made their first contribution in #1850

Full Changelog: v3.8.25...v3.8.26

v3.8.25

What's Changed

• Bump actions/checkout from 3 to 4 by @dependabot in #1798
• Update webmock requirement from ~> 3.18.1 to ~> 3.19.1 by @dependabot in #1797
• Bump docker/login-action from 2.1.0 to 2.2.0 by @dependabot in #1785

Full Changelog: v3.8.24...v3.8.25

v3.8.24

This is a management release to ensure that the gem is properly pushed to the rubygems channel, as this has failed with the last tagged release. No functionality has changed since v3.8.23.

v3.8.23

• Minor:
  • Updated --password-attack help text to mentions that xmlrpc multi call attack will only work against WP < 4.4 - Ref #1755
  • Fixed a small bug where the API calls would fail when both a proxy with authentication and an API token were used at the same time - ref #1783

v3.8.22

See https://github.com/wpscanteam/CMSScanner/releases/tag/v0.13.8

• Minor:
  • Better handling of redirection, ie when target http->https (or the opposite), the target URL will be changed to the new one automatically to avoid scanning the http version and getting 301 which could result in items being missed
  • Better handling of unsupported HEAD method by checking for 501 and timeout as well

v3.8.21

• Minor
  • Improved plugin version detection via changelog section in the Readme - Ref #1692
  • Fixed deprecation warnings - Ref #1709

v3.8.20

• Minor:
  • Added patch for Homebrew

v3.8.19

• Minor:
  • New version for updated dependencies

v3.8.18

• Minor:
  • Fixed incorrect generation of DB Export locations when the target is an IP address - Ref #1638
  • Added subdomain in DB Backup files checked - Ref #1642
  • Updated WP Version output to handle future status such as latest-in-branch - Ref #1649
  • Fixed a crash when psych >= 4.0.0 was installed on the system running WPScan - Ref #1646