Description
WordPress Automatic Plugin存在任意文件下载漏洞，此漏洞是由于download接口对用户的请求验证不当导致的。
WordPress Automatic 插件 CVE-2024-27954 任意文件下载漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-27954
https://www.cvedetails.com/cve/CVE-2024-27954/
https://www.cve.org/CVERecord?id=CVE-2024-27954
https://patchstack.com/articles/critical-vulnerabilities-patched-in-wordpress-automatic-plugin/
https://www.wiz.io/vulnerability-database/cve/cve-2024-27954
https://wpscan.com/vulnerability/53b97401-1352-477b-a69a-680b01ef7266
https://www.rapid7.com/db/vulnerabilities/wp-automatic-plugin-cve-2024-27954/
https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2024-27954
https://avd.aquasec.com/nvd/2024/cve-2024-27954/