Nuclei Template
View the template here CVE-2018-20985.yaml
Validate with Nuclei
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-20985.yaml
WordPress Plugin WP Payeezy Pay is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Payeezy Pay version 2.97 is vulnerable; prior versions are also affected.
View the template here CVE-2018-20985.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-20985.yaml
References:
https://www.pluginvulnerabilities.com/2018/12/06/our-improved-proactive-monitoring-has-now-caught-a-local-file-inclusion-lfi-vulnerability-as-well/