Vulnerabilities in WP Automatic

2 results
CVE-2024-27954CRITICALWordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerabilityEPSS 73.0%CVE-2024-27955HIGHWordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerabilityEPSS 0.3%