Vulnerabilities

TI-2024-18558 CVE-2024-27955 · GHSA-mcwq-w6hv-xqv4

WordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects Automatic: from n/a through 3.92.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00274 Published 2024-05-17 No fix listed CWE-352

TI-2024-18557 CVE-2024-27954 · GHSA-cjr8-gj3h-wpfp

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability

HIGH 84

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.9…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.72766 Published 2024-05-17 No fix listed CWE-22

Vulnerabilities

Filters

WordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability