CVE-2024-27956
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
CRITICAL 9.8EPSS 94.1%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.
- Affected
- ValvePress · Automatic
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 PATCHSTACK
- 9.9 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L - EPSS
- 94.06% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- critical · CWE-89
- Published
- 2024-03-21
- Updated
- 2026-04-28
Proof-of-concept exploits (22)
- 7aRanchi/CVE-2024-27956-for-fscan0★ · 2024-12-20
- AiGptCode/WordPress-Auto-Admin-Account-and-Reverse-Shell-cve-2024-27956133★ · 2026-05-29
- AlienTec1908/Matrioshka_HackMyVM_Medium1★ · 2025-12-08
- CERTologists/EXPLOITING-CVE-2024-279560★ · 2024-07-23
- Cappricio-Securities/CVE-2024-279562★ · 2024-06-24
- FoxyProxys/CVE-2024-279561★ · 2024-05-15
- Professor6T9/WordPressAutoExploiter1★ · 2025-06-25
- TadashiJei/Valve-Press-CVE-2024-27956-RCE0★ · 2024-06-13
- ThatNotEasy/CVE-2024-279568★ · 2024-07-11
- W3BW/CVE-2024-27956-RCE-File-Package0★ · 2024-05-15
- X-Projetion/CVE-2024-27956-WORDPRESS-RCE-PLUGIN0★ · 2024-05-03
- amessedad/autoexploitGPT1★ · 2024-10-03
- cve-2024/CVE-2024-27956-RCE0★ · 2024-06-14
- devsec23/CVE-2024-279561★ · 2025-05-01
- diego-tella/CVE-2024-27956-RCE89★ · 2024-05-03
- itzheartzz/MASS-CVE-2024-279563★ · 2024-06-09
- k3ppf0r/CVE-2024-279560★ · 2024-05-07
- m4nInTh3mIdDle/wordpress-CVE-2024-279560★ · 2025-04-27
- truonghuuphuc/CVE-2024-279563★ · 2024-04-27
- Ap0dexMe0/CVE-2024-279568★ · 2024-07-11
- hitazuranahiro/Valve-Press-CVE-2024-27956-RCE0★ · 2024-06-13
- GMJayy/wp-cve-poc4★ · 2026-08-27
Nuclei templates (1)
Metasploit modules (1)
Security advisories
- https://patchstack.com/articles/critical-vulnerabilities-patched-in-wordpress-automatic-p…
- https://patchstack.com/database/vulnerability/wp-automatic/wordpress-automatic-plugin-3-9…