Skip to content
OpenAdvisories

Vendor

WP Automatic

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2024-27954 Public exploit EPSS 73%

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.92.0.