false positive on Monarch plugin

[truesamurai]

False positive on Monarch (divi plugin by elegant themes)

When doing wpscan on my company website I get a vulnerability identified on Monarch plugin. It says: [+] monarch | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection)

[!] 1 vulnerability identified:
[!] Title: ElegantThemes - Privilege Escalation
Fixed in: 1.2.7

But when I check my website then I see I already have version 1.4.12 of this plugin. So the wpscan i giving a false positive

Your environment

• Version of WPScan: 3.8.2
• Version of Ruby: 2.7.1p83
• Operating System (OS): Kali 2020.3

Steps to reproduce

I scanned my company website for vulnerabilities

Expected behavior

I should not says that Monarch is vulnerable, the version given by wpscan is wrong.

Actual behavior

It gives me a false positive

What have you already tried

scanned again , checked i was using API for sure

Things you have tried (where relevant):

• Update WPScan to the latest version [V ]
• Update Ruby to the latest version [ ]
• Ensure you can reach the target site using cURL [ ]
• Proxied WPScan through a HTTP proxy to view the raw traffic [ ]
• Ensure you are using a supported Operating System (Linux and macOS) [V ]

[erwanlr]

the version given by wpscan is wrong.

I don't see the version given in the output, could you paste it please ?

[truesamurai]

the version given by wpscan is wrong.

I don't see the version given in the output, could you paste it please ?

[+] monarch	Location: xxxxxxxxx
Found By: Urls In Homepage (Passive Detection)
Confirmed By: Urls In 404 Page (Passive Detection)
[!] 1 vulnerability identified:
[!] Title: ElegantThemes - Privilege Escalation
Fixed in: 1.2.7
References:
- https://wpvulndb.com/vulnerabilities/8394
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-11002
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-11003
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-11004
- http://www.pritect.net/blog/elegant-themes-security-vulnerability
- http://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products
The version could not be determined.

So it says the version could not be determined, but it says fixed in version 1.2.7 while I have 1.4.12

[erwanlr]

| The version could not be determined.

So there is why. WPScan could not determine the version, hence the vulnerability being output.

[erwanlr]

I've added version detection for this plugin. Just update wpscan DB with wpscan --update to get it.

Please note that success will vary depending on the hardening of the blog and CLI option used to scan (especially the --plugins-version-detection one).