{"uuid": "41a1fcd9-28db-4ad4-b87c-a261de7c5ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_bulletproofsecurity_backups.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"php\", \"author\": [\"Ron Jost (Hacker5preme)\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"The Wordpress plugin BulletProof Security, versions <= 5.1, suffers from an information disclosure\\n          vulnerability, in that the db_backup_log.txt is publicly accessible.  If the backup functionality\\n          is being utilized, this file will disclose where the backup files can be downloaded.\\n          After downloading the backup file, it will be parsed to grab all user credentials.\", \"disclosure_date\": \"2021-09-17\", \"fullname\": \"auxiliary/scanner/http/wp_bulletproofsecurity_backups\", \"is_install_path\": true, \"mod_time\": \"2023-04-12 13:09:34 +0000\", \"name\": \"Wordpress BulletProof Security Backup Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_bulletproofsecurity_backups.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_bulletproofsecurity_backups\", \"references\": [\"EDB-50382\", \"CVE-2021-39327\", \"PACKETSTORM-164420\", \"URL-https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-39327/README.md\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:56.493213Z"}