# FIXTURE_ONLY test table: want_rc|args|expected substring (shared by the bash and Pester tests)
1|--path tests/fixtures/wp_vuln|VULNERABLE: input (tests/fixtures/wp_vuln/wp-content/plugins/ninja-forms-uploads/file-uploads.php): File Uploads add-on 3.3.36 is in the affected range (up to and including 3.3.36) for CVE-2026-126537, plug-in name "Ninja Forms - File Uploads". Update to 3.3.37 or above.
1|--path tests/fixtures/wp_vuln|WP-CONFIG: found: tests/fixtures/wp_vuln/wp-config.php
1|--path tests/fixtures/wp_vuln --name site-fx-01|VULNERABLE: site-fx-01 (
0|--path tests/fixtures/wp_patched|PATCHED: input (tests/fixtures/wp_patched/wp-content/plugins/ninja-forms-uploads/file-uploads.php): File Uploads add-on 3.3.37 is 3.3.37 or above
0|--path tests/fixtures/wp_patched/|RESULT: PATCHED (1 PATCHED, 0 VULNERABLE, 0 NOT LISTED, 0 UNKNOWN)
0|--path tests/fixtures/wp_core_only|NOT LISTED: input (tests/fixtures/wp_core_only): core Ninja Forms found, File Uploads add-on (ninja-forms-uploads) not found. Core Ninja Forms is not listed as affected in the CVE record, which names only the File Uploads add-on.
0|--path tests/fixtures/wp_core_only|RESULT: NOT LISTED (0 PATCHED, 0 VULNERABLE, 1 NOT LISTED, 0 UNKNOWN)
0|--path tests/fixtures/wp_none|NOT LISTED: input (tests/fixtures/wp_none): File Uploads add-on (ninja-forms-uploads) not found under wp-content/plugins.
3|--path tests/fixtures/wp_noversion|UNKNOWN: input (tests/fixtures/wp_noversion/wp-content/plugins/ninja-forms-uploads/file-uploads.php): File Uploads add-on found but no version given
3|--path tests/fixtures/wp_nomain|the ninja-forms-uploads folder exists but ninja-forms-uploads/file-uploads.php is missing
5|--path tests/fixtures/wp_noconfig|WP-CONFIG: MISSING: no wp-config.php in tests/fixtures/wp_noconfig or one folder up.
5|--path tests/fixtures/wp_noconfig|RESULT: WP-CONFIG MISSING (1 PATCHED, 0 VULNERABLE, 0 NOT LISTED, 0 UNKNOWN)
0|--path tests/fixtures/wp_config_up/site|WP-CONFIG: found one folder up: tests/fixtures/wp_config_up/wp-config.php
0|--path tests/fixtures/wp_config_up/site|File Uploads add-on 3.3.40 is 3.3.37 or above
3|--path tests/fixtures/wp_between|File Uploads add-on 3.3.36.1 sits between 3.3.36 and 3.3.37
3|--path tests/fixtures/wp_dev|File Uploads add-on version "3.3.37-beta" is not one this pack can judge
1|--list tests/fixtures/list_vuln.csv|VULNERABLE: input (ninja-forms-uploads): File Uploads add-on 3.3.36 is in the affected range (up to and including 3.3.36) for CVE-2026-126537, status active.
0|--list tests/fixtures/list_patched_crlf.csv|PATCHED: input (ninja-forms-uploads): File Uploads add-on 3.3.37 is 3.3.37 or above, outside the affected range for CVE-2026-126537, status inactive.
0|--list tests/fixtures/list_core_only.csv|NOT LISTED: input (plug-in list): core Ninja Forms listed, File Uploads add-on (ninja-forms-uploads) not listed. Core Ninja Forms is not listed as affected
1|--list tests/fixtures/list_vuln.json|File Uploads add-on 3.3.30 is in the affected range
0|--list tests/fixtures/list_patched_pretty.json|File Uploads add-on 3.4.0 is 3.3.37 or above, outside the affected range for CVE-2026-126537, status must-use.
0|--list tests/fixtures/list_none.json|NOT LISTED: input (plug-in list): File Uploads add-on (ninja-forms-uploads) not in the plug-in list.
3|--list tests/fixtures/list_noversion.json|File Uploads add-on found but no version given, status active.
0|--version 3.3.37|PATCHED: input (version given): File Uploads add-on 3.3.37 is 3.3.37 or above
0|--version 3.3.37.0|PATCHED: input (version given)
0|--version 3.10.0|PATCHED: input (version given)
0|--version 4.0.0 --name site-fx-02|PATCHED: site-fx-02 (version given)
1|--version 3.3.36|VULNERABLE: input (version given): File Uploads add-on 3.3.36 is in the affected range
1|--version 3.3.36.0|VULNERABLE: input (version given)
1|--version 3.3.9|VULNERABLE: input (version given)
1|--version 3.0.0|VULNERABLE: input (version given)
1|--version 2.8.4|VULNERABLE: input (version given)
1|--version 0.0.1|VULNERABLE: input (version given)
3|--version 3.3.36.5|sits between 3.3.36 and 3.3.37
3|--version 3.3|UNKNOWN: input (version given): File Uploads add-on version "3.3" is not one this pack can judge
3|--version v3.3.37|UNKNOWN: input (version given)
3|--version 3.3.37-rc1|UNKNOWN: input (version given)
4||Usage: check-ninja-forms-uploads.sh
4|--path|Usage: check-ninja-forms-uploads.sh
4|--bogus x|Usage: check-ninja-forms-uploads.sh
4|--name x|Usage: check-ninja-forms-uploads.sh
4|--version 3.3.37 --list tests/fixtures/list_vuln.csv|Usage: check-ninja-forms-uploads.sh
4|--name a --name b --version 3.3.37|Usage: check-ninja-forms-uploads.sh
4|--path tests/fixtures/does_not_exist|ERROR: not a folder
4|--path tests|ERROR: no wp-content/plugins folder in tests (pass the WordPress root)
4|--list tests/fixtures/list_bad_header.csv|ERROR: CSV list needs name and version columns
4|--list tests/fixtures/list_empty.json|ERROR: no plug-in objects with a name in JSON list
4|--list tests/fixtures/does_not_exist.csv|ERROR: cannot read list file
