Exploit for CVE-2024-27956-WORDPRESS-RCE-PLUGIN

kitploit · 2026-08-26

Description

Remote code execution in WordPress plugin wp-automatic.

Affected Valvepress Automatic versions

Valvepress Automatic≤ 3.92.0

All known vulnerabilities by product

Valvepress Automatic Wordpress

CVSS 9.9 for CVE-2024-27956

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:LOW

Integrity:HIGH

Availability:LOW

EPSS Score

94.0%higher than 99.8% of all CVEs

Updated 2026-08-28

CVE Information

Exploit Details

Modified:2026-08-26 06:09

Last Seen:2026-08-26 07:03

Reporter:KitPloit

Tags

wp-automaticremote code executionWordPresspluginCVE-2024-27956

Other exploits for CVE-2024-27956

wordpress-CVE-2024-27956

2026-08-31 KitPloitKITPLOIT

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE-File-Package

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-31 KitPloitKITPLOIT

Valve-Press-CVE-2024-27956-RCE

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-X-PROJETION-CVE-2024-27956-WORDPRESS-RCE-PLUGIN
# CVE-2024-27956-WORDPRESS-RCE-PLUGIN

CVE-2024-27956 WORDPRESS RCE PLUGIN हमला किया गया प्लगइन (wp-automatic)