17 matches found
CVE-2024-27956-WORDPRESS-RCE-PLUGIN
CVE-2024-27956-WORDPRESS-RCE-PLUGIN CVE-2024-27956 WORDPRESS RCE PLUGIN Plugin atacado wp-automatic...
CVE-2024-27956
Exploit de Inyección SQL del Plugin WP Automatic CVE-2024-27956 Un exploit de prueba de concepto para la vulnerabilidad de inyección SQL en el plugin WP Automatic CVE-2024-27956 que afecta a sitios WordPress. 📌 Descripción Este exploit apunta a una vulnerabilidad crítica de inyección SQL sin...
CVE-2024-27954
CVE-2024-27954 📝 CVE-2024-27954 - Vulnerabilidad de Path Traversal y SSRF en el Plugin WP Automatic Descripción Existe una vulnerabilidad de Limitación Inadecuada de una Ruta a un Directorio Restringido 'Path Traversal' en el plugin WP Automatic, que permite ataques de Path Traversal y Server-Sid...
CVE-2024-27954
⚠️ CVE-2024-27954 💀 Herramientas Automáticas de Explotación de Ejecución Remota de Código | Por GhostSec 💀 📝 Descripción Limitación incorrecta de una ruta de acceso a un directorio restringido vulnerabilidad de 'Path Traversal' en WP Automatic Automatic permite salto de ruta 'Path Traversal' y...
CVE-2024-27956
CVE-2024-27956 Nota Construye wordpress: docker-compose -f stack.yml up Instala el plugin: 1. Panel de WordPress, elige Plugins Añadir nuevo 2. Haz clic en Subir plugin 3. Elige Archivo - wp-automatic.zip - Instalar ahora 4. Cuando la instalación haya terminado, haz clic en Activar plugin Exploit...
CVE-2024-27954
CVE-2024-27954 - Escáner de LFI para el Plugin wp-automatic de WordPress Este proyecto proporciona un escáner de vulnerabilidades de Inclusión de Archivos Locales LFI basado en Python que apunta a CVE-2024-27954 , una falla crítica encontrada en el plugin de WordPress wp-automatic. La...
GHSA-VWF4-M7J8-WCJF
creationtimestamp| type| source ---|---|--- 2026-08-12 08:00:05+00:00| seen| Telegram/ZtTgk35S8DFYm2bUVjFVqqtPnGYEzTcbCUrks9IGhgQhA 2026-08-13 00:00:43+00:00| published-proof-of-concept| Telegram/ZtTgk35S8DFYm2bUVjFVqqtPnGYEzTcbCUrks9IGhgQhA 2026-08-16 20:29:14+00:00| seen|...
EUVD-2024-25129
Malicious code in bioql PyPI...
Exploit for SQL Injection in Valvepress Automatic
WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 !...
CVE-2024-27954
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.92.0...
CVE-2024-27955
Cross-Site Request Forgery CSRF vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects Automatic: from n/a through 3.92.0...
WordPress WP-Automatic SQL Injection Exploit
This Metasploit module exploits an unauthenticated SQL injection vulnerability in the WordPress wp-automatic plugin versions prior to 3.92.1 to achieve remote code execution. The vulnerability allows the attacker to inject and execute arbitrary SQL commands, which can be used to create a maliciou...
CVE-2024-27955
Cross-Site Request Forgery CSRF vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects Automatic: from n/a through 3.92.0...
CVE-2024-27954
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.92.0...
Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites
Threat actors are attempting to actively exploit a critical security flaw in the ValvePress Automatic plugin for WordPress that could allow site takeovers. The shortcoming, tracked as CVE-2024-27956, carries a CVSS score of 9.9 out of a maximum of 10. It impacts all versions of the plugin prior t...
WordPress wp-automatic Plugin SQLi Admin Creation
This module exploits an unauthenticated SQL injection vulnerability in the WordPress wp-automatic plugin versions use exploit/multi/http/wp/automaticsqlitorce msf undefinedautomaticsqlitorce show actions ...actions... msf undefinedautomaticsqlitorce set ACTION msf undefinedautomaticsqlitorce show...
