{"uuid": "1b699cca-1558-4884-b649-3da45d695a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24762", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_perfect_survey_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Aaryan Golatkar\", \"Ron Jost\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability in the Perfect Survey\\n          plugin for WordPress (version 1.5.1). An unauthenticated attacker can\\n          exploit the SQLi to retrieve sensitive information such as usernames,\\n          emails, and password hashes from the `wp_users` table.\", \"disclosure_date\": \"2021-10-05\", \"fullname\": \"auxiliary/scanner/http/wp_perfect_survey_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:52:36 +0000\", \"name\": \"WordPress Plugin Perfect Survey 1.5.1 SQLi (Unauthenticated)\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_perfect_survey_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_perfect_survey_sqli\", \"references\": [\"EDB-50766\", \"CVE-2021-24762\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:58.182756Z"}