auxiliary/scanner/http/wordpress_login_enum

functional

WordPress Brute Force and User Enumeration Utility

view exploit source metasploittype auxiliarycatalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2009-2335US	medium5.0	85.0% (100th)	Exploit	2009-07-10
WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumera…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.