Skip to content
OpenAdvisories

Vendor

ValvePress

15 known vulnerabilities.

Products

WordPress Automatic Plugin 4 Automatic 3 Rankie 3 Pinterest Automatic Pin 2 Wordpress Auto Spinner 2 Pinterest Automatic 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2026-56045

    WordPress Automatic plugin < 3.135.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.

    ValvePress Automatic
  • High 8.5
    CVE-2025-39510

    WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through < 4.19.0.

    ValvePress Pinterest Automatic Pin
  • High 7.1
    CVE-2025-46500

    WordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Reflected XSS.This issue affects Wordpress Auto Spinner: from n/a through <= 3.26.0.

    ValvePress Wordpress Auto Spinner Web / CMS
  • High 7.1
    CVE-2025-39487

    WordPress Rankie plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Rankie valvepress-rankie allows Reflected XSS.This issue affects Rankie: from n/a through <= 1.8.2.

    ValvePress Rankie
  • High 8.5
    CVE-2025-39486

    WordPress Rankie plugin < 1.8.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Rankie valvepress-rankie allows SQL Injection.This issue affects Rankie: from n/a through < 1.8.2.

    ValvePress Rankie
  • High 8.8
    CVE-2025-5395

    WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload

    The WordPress Automatic Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'core.php' file in all versions up to, and including, 3.115.0. This makes it possible for authenticated attackers, with…

    ValvePress WordPress Automatic Plugin Web / CMS
  • High 7.6
    CVE-2024-32693

    WordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0.

    ValvePress Automatic