CVE-2024-27954

This repository contains a functional exploit for CVE-2024-27954, targeting a path traversal vulnerability in the WP Automatic WordPress plugin. The exploit creates an administrator user via SQL injection, demonstrating remote code execution capabilities.

This repository provides a writeup and detection queries for CVE-2024-27954, a path traversal and SSRF vulnerability in the WP Automatic plugin up to version 3.92.0. It includes installation instructions and Nuclei template usage for scanning.

This repository contains a Python-based scanner for CVE-2024-27954, an LFI vulnerability in the WordPress wp-automatic plugin. The script tests for file inclusion via the `file://` scheme and supports multithreaded scanning with proxy and output options.

The repository contains a Nuclei template for detecting CVE-2024-27954, a path traversal and SSRF vulnerability in the WP Automatic plugin. The template sends a crafted request to download /etc/passwd and checks for a successful response.