WordPress ValvePress Automatic Plugin SQL Injection (CVE-2024-27956)

Related Vulnerabilities: CVE-2024-27956  

Check Point Reference: CPAI-2024-0236 Date Published: 16 May 2024 Severity: Critical Last Updated: Thursday 16 May, 2024 Source: Industry Reference:CVE-2024-27956
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? WordPress ValvePress Automatic plugin up to and including 3.92.0 Vulnerability Description An SQL injection vulnerability exists in WordPress ValvePress Automatic plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.