{"vulnerability": "cve-2020-27615", "sightings": [{"uuid": "9de5c37e-5ddb-4cf8-a583-fbc3c1c3d642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "fb5971fc-3b35-4556-b89e-1bcbe54e050d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:27.000000Z"}, {"uuid": "83995e07-60be-43bb-9e45-fb283e3f8a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-27615.yaml", "content": "", "creation_timestamp": "2025-09-13T21:36:38.000000Z"}, {"uuid": "cfd08398-e8bc-437d-9053-d2ffebfbbd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_loginizer_log_sqli.rb", "content": "", "creation_timestamp": "2020-11-05T14:43:56.000000Z"}, {"uuid": "168a1e50-fc22-4e1f-b917-b287c99ec6a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rtocsj25", "content": "", "creation_timestamp": "2025-09-16T21:02:26.018138Z"}, {"uuid": "644e154f-1405-4193-923b-b4169a9bdfa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "seen", "source": "https://t.me/cibsecurity/15509", "content": "\u203c CVE-2020-27615 \u203c\n\nThe Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-22T00:51:26.000000Z"}, {"uuid": "f10c89b5-5b0b-49a2-86a7-ba59aebc0447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27615", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_loginizer_log_sqli.rb", "content": "{\"actions\": [{\"description\": \"Queries username, password hash for COUNT users\", \"name\": \"List Users\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"red0xff\", \"mslavco\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Loginizer wordpress plugin contains an unauthenticated timebased SQL injection in\\n          versions before 1.6.4.  The vulnerable parameter is in the log parameter.\\n          Wordpress has forced updates of the plugin to all servers\", \"disclosure_date\": \"2020-10-21\", \"fullname\": \"auxiliary/scanner/http/wp_loginizer_log_sqli\", \"is_install_path\": true, \"mod_time\": \"2023-04-12 13:09:34 +0000\", \"name\": \"WordPress Loginizer log SQLi Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_loginizer_log_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_loginizer_log_sqli\", \"references\": [\"URL-https://wpdeeply.com/loginizer-before-1-6-4-sqli-injection/\", \"CVE-2020-27615\", \"URL-https://loginizer.com/blog/loginizer-1-6-4-security-fix/\", \"URL-https://twitter.com/mslavco/status/1318877097184604161\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:57.594833Z"}]}