CVE-2024-27955: WordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability
Published May 17, 2024
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects Automatic: from n/a through 3.92.0.
Affected Software
1 affected component
Automatic WP Automatic<=3.92.0
Remediation
Information
Update to 3.92.1 or a higher version.
Event History
May 17, 2024
CVE Published
via MITRE·08:50 AM
Data Sourced
via MITRE·08:50 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Sep 28, 58293
Event
via MITRE·01:26 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-27955?
CVE-2024-27955 has been classified as a high severity cross-site request forgery vulnerability.
2
How do I fix CVE-2024-27955?
To fix CVE-2024-27955, update the WP Automatic plugin to a version higher than 3.92.0.
3
What type of vulnerability is CVE-2024-27955?
CVE-2024-27955 is a Cross-Site Request Forgery (CSRF) vulnerability that allows privilege escalation.
4
Which versions of WP Automatic are affected by CVE-2024-27955?
CVE-2024-27955 affects WP Automatic versions up to and including 3.92.0.
5
Can CVE-2024-27955 be exploited remotely?
Yes, CVE-2024-27955 can be exploited remotely, allowing unauthorized privilege escalation.