Skip to content
OpenAdvisories

Vendor

ValvePress

15 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-27956 Public exploit Scanner template EPSS 94%

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.

  • Critical 9.1
    CVE-2021-4374 Public exploit Scanner template EPSS 16%

    WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

    The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the process_form.php file. This makes it possible for unauthenticat…