CVE-2024-27956 PoC — WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

Source

https://github.com/W3BW/CVE-2024-27956-RCE-File-Package

Associated Vulnerability

Title:WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability (CVE-2024-27956)
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.

Readme

CVE-2024-27956-RCE File Package 

Contents:
1. exploit.py (Original Creator:https://GitHub.com/diego-tella)
2. modified_exploit.py (Modified with an ignore ssl verification option)
3. Screenshot
4. wpValvePressplugin.py (Python script using URI parameters to search for vulnerable wp plugin)

File Snapshot


 [4.0K]  /data/pocs/98acf75aa6a245fe4eb494d245d0f3a607a48ece
├── [2.2K]  exploit.py
├── [2.3K]  modified_exploit.py
├── [ 292]  README.md
├── [185K]  Screenshot_2.png
└── [1.1K]  wpValvePressplugin.py

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →