Description
WordPress是使用PHP语言开发的开源发布平台，用户可以在支持PHP和MySQL数据库的服务器上架设属于自己的博客、网站。也可以把WordPress当作一个内容管理系统（CMS）来使用。其WordPress Automatic Plugin存在文件读取漏洞，攻击者可通过改漏洞获取敏感信息。
WordPress Automatic Plugin / 文件读取漏洞（CVE-2024-27954）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-27954
https://patchstack.com/database/vulnerability/wp-automatic/wordpress-automatic-plugin-3-92-0-unauthenticated-arbitrary-file-download-and-ssrf-vulnerability
https://wpscan.com/vulnerability/53b97401-1352-477b-a69a-680b01ef7266/
https://infosecwriteups.com/cve-2024-27954-wordpress-automatic-plugin-3-92-1-arbitrary-file-download-and-ssrf-34f2e938db54
https://github.com/gh-ost00/CVE-2024-27954
https://cve.imfht.com/poc_detail/86e402fa19da83f5ad0b083ecdd2e5ec09aca3b1
https://www.sentinelone.com/vulnerability-database/cve-2024-27954/
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-27954
https://vuldb.com/vuln/264865