Vulnerability · Published May 17, 2024 · Assigned by Patchstack
CVE-2024-27954WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability
Critical 9.3
In plain English
A critical-severity path traversal in Automatic from WP Automatic. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 72.8% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS 3.1)9.3Critical
Exploit odds (30 days)72.8%top 0.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling2Nuclei, Public PoC
Official description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.92.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WP Automatic | Automatic | n/a – through 3.92.0 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N