{"uuid": "89ac1326-0399-46e5-b560-fbd7e30919b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1071", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_ultimate_member_sorting_sqli.rb", "content": "{\"actions\": [{\"description\": \"SQL Injection via sorting parameter\", \"name\": \"Extract User Credentials\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Christiaan Swiers\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"The Ultimate Member plugin for WordPress up to version 2.8.2 is vulnerable to SQL injection via\\n          the 'sorting' parameter. This allows unauthenticated attackers to exploit blind SQL injections and\\n          extract sensitive information from the database.\", \"disclosure_date\": \"2024-02-10\", \"fullname\": \"auxiliary/scanner/http/wp_ultimate_member_sorting_sqli\", \"is_install_path\": true, \"mod_time\": \"2025-07-29 11:36:48 +0000\", \"name\": \"WordPress Ultimate Member SQL Injection (CVE-2024-1071)\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_ultimate_member_sorting_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_ultimate_member_sorting_sqli\", \"references\": [\"CVE-2024-1071\", \"URL-https://github.com/gbrsh/CVE-2024-1071\", \"URL-https://www.wordfence.com/blog/2024/02/2063-bounty-awarded-for-unauthenticated-sql-injection-vulnerability-patched-in-ultimate-member-wordpress-plugin/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:58.925881Z"}