Skip to content
OpenAdvisories

Vendor

ValvePress

15 known vulnerabilities.

Products

WordPress Automatic Plugin 4 Automatic 3 Rankie 3 Pinterest Automatic Pin 2 Wordpress Auto Spinner 2 Pinterest Automatic 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-27956 Public exploit Scanner template EPSS 94%

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.

    ValvePress Automatic
  • Critical 9.8
    CVE-2021-4380 Scanner template

    Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

    The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wp_pinterest_automatic_parse_request' function and the 'process_form.php' script in versions up to, and including, 1.14.3. This makes i…

    ValvePress Pinterest Automatic Web / CMS
  • Critical 9.1
    CVE-2021-4374 Public exploit Scanner template EPSS 16%

    WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

    The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the process_form.php file. This makes it possible for unauthenticat…

    ValvePress WordPress Automatic Plugin Web / CMS