Sploitus

Exploit for SQL Injection in Valvepress Automatic

githubexploit Β· 2024-06-09

Exploit Code

README11 lines
## https://sploitus.com/exploit?id=76E4EABB-F265-548D-9F3F-899AD58BC3BD
# MASS-CVE-2024-27956-RCE
A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution.

Usage

```
git clone https://github.com/itzheartzz/MASS-CVE-2024-27956/
cd MASS-CVE-2024-27956
python3 exploit.py list.txt
```