{"uuid": "f10c89b5-5b0b-49a2-86a7-ba59aebc0447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_loginizer_log_sqli.rb", "content": "{\"actions\": [{\"description\": \"Queries username, password hash for COUNT users\", \"name\": \"List Users\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"red0xff\", \"mslavco\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Loginizer wordpress plugin contains an unauthenticated timebased SQL injection in\\n          versions before 1.6.4.  The vulnerable parameter is in the log parameter.\\n          Wordpress has forced updates of the plugin to all servers\", \"disclosure_date\": \"2020-10-21\", \"fullname\": \"auxiliary/scanner/http/wp_loginizer_log_sqli\", \"is_install_path\": true, \"mod_time\": \"2023-04-12 13:09:34 +0000\", \"name\": \"WordPress Loginizer log SQLi Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_loginizer_log_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_loginizer_log_sqli\", \"references\": [\"URL-https://wpdeeply.com/loginizer-before-1-6-4-sqli-injection/\", \"CVE-2020-27615\", \"URL-https://loginizer.com/blog/loginizer-1-6-4-security-fix/\", \"URL-https://twitter.com/mslavco/status/1318877097184604161\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:57.594833Z"}