Lucene search
+L

23 matches found

Kitploit
Kitploit
•added 2026/10/18 8:20 p.m.•17 views

CVE-2024-27956-WORDPRESS-RCE-PLUGIN

CVE-2024-27956-WORDPRESS-RCE-PLUGIN CVE-2024-27956 WORDPRESS RCE PLUGIN Attacked plugin wp-automatic...

9.9CVSS9.1AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/18 12:51 p.m.•15 views

CVE-2024-27956

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-27956 Run bellow command to check CVE-2024-27956 -h Configurations 2. We integrated with the Telegram API to receive...

9.9CVSS8.9AI score0.94057EPSS
SaveExploits16References2
Kitploit
Kitploit
•added 2026/10/18 8:38 a.m.•21 views

MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...

9.9CVSS9.2AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/18 8:20 a.m.•12 views

wordpress-CVE-2024-27956

This repository does not have a README...

9.9CVSS8.8AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/17 1:55 p.m.•19 views

EXPLOITING-CVE-2024-27956

Python script that exploits CVE-2024-27956, a vulnerability in Wordpress that allows SQL Injection leading to Remote Code Execution...

9.9CVSS8.9AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/14 4:55 a.m.•14 views

CVE-2024-27956

This repository does not have a README...

9.9CVSS8.8AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/12 11:42 p.m.•17 views

CVE-2024-27956

CVE-2024-27956 CVE-2024-27956...

9.9CVSS9.1AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/12 7:58 p.m.•18 views

Valve-Press-CVE-2024-27956-RCE

Valve-Press-CVE-2024-27956-RCE Valve Press - CVE-2024-27956-RCE - SQL Injection...

9.9CVSS9.1AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/12 1:24 p.m.•16 views

CVE-2024-27956

Wordpress SQLI-2-RCE Exploit This Python script exploits CVE-2024-27956, a vulnerability in Wordpress that allows for SQL Injection leading to Remote Code Execution RCE. Features Multi-threaded Exploitation: Utilizes concurrent threads to exploit multiple Wordpress instances simultaneously. Dynam...

9.9CVSS9.2AI score0.94057EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/12 9:29 a.m.•18 views

CVE-2024-27956-RCE-File-Package

CVE-2024-27956-RCE File Package Contents: 1. exploit.py Original Creator:https://GitHub.com/diego-tella 2. modifiedexploit.py Modified with an ignore ssl verification option 3. Screenshot 4. wpValvePressplugin.py Python script using URI parameters to search for vulnerable wp plugin...

9.9CVSS8.8AI score0.94057EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/12/20 7:30 a.m.•142 views

Exploit for SQL Injection in Valvepress Automatic

🛑CVE-2024-27956-for-fscan Thanks for the PoC by diego-tella...

9.9CVSS7.6AI score0.94057EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/06/14 7:13 a.m.•546 views

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

9.9CVSS10AI score0.94057EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/06/09 7:21 a.m.•395 views

Exploit for SQL Injection in Valvepress Automatic

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Inject...

9.9CVSS10AI score0.94057EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/05/15 7:48 a.m.•578 views

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE File Package Contents: 1. exploit.py...

9.9CVSS9.6AI score0.94057EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/05/01 1:58 a.m.•751 views

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

9.9CVSS10AI score0.94057EPSS
SaveExploits16
The Hacker News
The Hacker News
•added 2024/04/26 5:49 a.m.•85 views

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

Threat actors are attempting to actively exploit a critical security flaw in the ValvePress Automatic plugin for WordPress that could allow site takeovers. The shortcoming, tracked as CVE-2024-27956, carries a CVSS score of 9.9 out of a maximum of 10. It impacts all versions of the plugin prior t...

9.9CVSS10AI score0.94057EPSS
SaveExploits21
Circl
Circl
•added 2024/04/25 8:40 p.m.•66 views

CVE-2024-27956

creationtimestamp| type| source ---|---|--- 2024-04-25 20:40:42+00:00| seen| https://t.me/CyberSecurityIL/43564 2024-04-26 08:00:07+00:00| exploited| https://t.me/thehackernews/4878 2024-04-26 09:03:37+00:00| exploited| https://t.me/KomunitiSiber/1850 2024-04-26 09:20:55+00:00| exploited|...

9.9CVSS8.5AI score0.94057EPSS
SaveIn wildExploits16References78
VulnCheck KEV
VulnCheck KEV
•added 2024/04/24 12:00 a.m.•7 views

VulnCheck KEV: CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic through 3.92.0...

9.9CVSS8.5AI score0.94057EPSS
SaveIn wildExploits16References368
NVD
NVD
•added 2024/03/21 5:15 p.m.•54 views

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

9.9CVSS9.8AI score0.94057EPSS
SaveExploits16References2
Vulnrichment
Vulnrichment
•added 2024/03/21 5:01 p.m.•43 views

CVE-2024-27956 WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

9.9CVSS7.5AI score0.94057EPSS
SaveExploits16References2
Rows per page
Query Builder