CVE-2024-27956 PoC — WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

Source

https://github.com/W3BW/CVE-2024-27956-RCE-File-Package

Associated Vulnerability

Title: WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability (CVE-2024-27956)
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.

Readme

CVE-2024-27956-RCE File Package 

Contents:
1. exploit.py (Original Creator:https://GitHub.com/diego-tella)
2. modified_exploit.py (Modified with an ignore ssl verification option)
3. Screenshot
4. wpValvePressplugin.py (Python script using URI parameters to search for vulnerable wp plugin)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →