Exploit for CVE-2024-27956

kitploit · 2026-08-30

Description

SQL injection leading to RCE in WordPress via admin account creation and reverse shell.

Affected Valvepress Automatic versions

Valvepress Automatic≤ 3.92.0

All known vulnerabilities by product

Valvepress Automatic Wordpress

CVSS 9.9 for CVE-2024-27956

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:LOW

Integrity:HIGH

Availability:LOW

CVE Information

Exploit Details

Modified:2026-08-30 16:57

Last Seen:2026-08-31 00:18

Reporter:KitPloit

Tags

WordPressSQL injectionRCEadmin account creationreverse shell

Other exploits for CVE-2024-27956

wordpress-CVE-2024-27956

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-WORDPRESS-RCE-PLUGIN

2026-08-31 KitPloitKITPLOIT

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE-File-Package

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-31 KitPloitKITPLOIT

Valve-Press-CVE-2024-27956-RCE

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-FOXYPROXYS-CVE-2024-27956
🚨POC ВЫПУЩЕН🚨PoC для SQL-инъекции, приводящей к RCE в Wordpress, выпущен (CVE-2024-27956). Создание учётной записи администратора WordPress и Reverse Shell (cve-2024-27956) Использование- sudo python3 cve.py