CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.

Affected products

Valvepress Automatic, Wordpress

Valvepress Automatic

≤ 3.92.0

Fix

Available

CVSS 3.1

9.9 CRITICAL

EPSS

94.0% (100th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2024-03-21

Attack patterns

CAPEC-66