Exploit for CVE-2024-27956-RCE-File-Package

kitploit · 2026-08-31

Description

RCE in WordPress File Package plugin.

Affected Valvepress Automatic versions

Valvepress Automatic≤ 3.92.0

All known vulnerabilities by product

Valvepress Automatic Wordpress

CVSS 9.9 for CVE-2024-27956

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:LOW

Integrity:HIGH

Availability:LOW

CVE Information

Exploit Details

Modified:2026-08-31 07:13

Last Seen:2026-08-31 11:43

Reporter:KitPloit

Tags

File PackageRemote Code ExecutionWordPressCVE-2024-27956Plugin

Other exploits for CVE-2024-27956

wordpress-CVE-2024-27956

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-WORDPRESS-RCE-PLUGIN

2026-08-31 KitPloitKITPLOIT

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-31 KitPloitKITPLOIT

Valve-Press-CVE-2024-27956-RCE

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

Exploit Code

MARKDOWN9 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-W3BW-CVE-2024-27956-RCE-FILE-PACKAGE
CVE-2024-27956-RCE - Пакет файлов

Содержимое:

  1. exploit.py (Оригинальный автор: https://GitHub.com/diego-tella)
  2. modified_exploit.py (Модифицирован с опцией игнорирования проверки SSL)
  3. Скриншот
  4. wpValvePressplugin.py (Скрипт на Python, использующий параметры URI для поиска уязвимого плагина wp)