WP Automatic

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

WP Automatic records in CISA KEV

No WP Automatic vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-18557 CVE-2024-27954 · GHSA-cjr8-gj3h-wpfp

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability

HIGH 84

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.9…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.72766 Published 2024-05-17 No fix listed CWE-22

TI-2024-18558 CVE-2024-27955 · GHSA-mcwq-w6hv-xqv4

WordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects Automatic: from n/a through 3.92.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00274 Published 2024-05-17 No fix listed CWE-352

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0