ValvePress - SQLi (CVE-2024-27956)
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.
psychologyCrowdSec Analysis
CVE-2024-27956 is a high-severity vulnerability in the ValvePress Automatic WordPress plugin, allowing attackers to perform SQL injection through improper handling of user-supplied input.
CrowdSec has been tracking this vulnerability and its exploits since 13th of November 2024.
According to CrowdSec data, while opportunistic exploitation dominates, a portion of threat actors trying to exploit CVE-2024-27956 apply basic targeting methods such as port or service detection. This indicates emerging patterns of selective targeting. In addition, according to the CrowdSec network, attack volume against CVE-2024-27956 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.
Observed exploitation attempts are aimed at the /wp-content/plugins/wp-automatic/inc/csv.php path.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2024-03-21 |
| Rule Released | 2024-11-13 |
| CrowdSec First Seen | 2024-11-23 |