Exploit for SQL Injection in Valvepress Automatic

🛑CVE-2024-27956-for-fscan Thanks for the PoC by diego-tella...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

Exploit for SQL Injection in Valvepress Automatic

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Inject...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE File Package Contents: 1. exploit.py...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

Threat actors are attempting to actively exploit a critical security flaw in the ValvePress Automatic plugin for WordPress that could allow site takeovers. The shortcoming, tracked as CVE-2024-27956, carries a CVSS score of 9.9 out of a maximum of 10. It impacts all versions of the plugin prior t...

CVE-2024-27956

creationtimestamp| type| source ---|---|--- 2024-04-25 20:40:42+00:00| seen| https://t.me/CyberSecurityIL/43564 2024-04-26 08:00:07+00:00| exploited| https://t.me/thehackernews/4878 2024-04-26 09:03:37+00:00| exploited| https://t.me/KomunitiSiber/1850 2024-04-26 09:20:55+00:00| exploited|...

VulnCheck KEV: CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic through 3.92.0...

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956 WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956 WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956

Summary of CVE-2024-27956 (WordPress WP Automatic SQLi) : The WP Automatic plugin (WordPress) is vulnerable to unauthenticated SQL Injection, affecting versions up to 3.92.0 (and variants noting patch to 3.92.1). The underlying issue is insufficient input handling in the plugin’s SQL queries, ena...

WordPress Automatic Plugin <= 3.92.0 is vulnerable to SQL Injection

Software Automatic Type Plugin Vulnerable versions = 3.92.0 Fixed in 3.92.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-27956 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID aeab56860169 Credits Rafie Muhammad Patchstack Required privilege...