Valvepress
14 CVEs across 8 Valvepress products. Browse Valvepress vulnerabilities, severities, and proof-of-concept exploits.
Valvepress products with known CVEs
Valvepress CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-56045 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions. |
CVE-2025-6247 | Medium | 4.7 | 2025-08-26 | The WordPress Automatic Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.118.0. This is due to m… |
CVE-2025-39510 | High | 8.5 | 2025-08-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic… |
CVE-2025-46500 | High | 7.1 | 2025-07-16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows… |
CVE-2025-39487 | High | 7.1 | 2025-07-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Rankie valvepress-rankie allows Reflected XSS… |
CVE-2025-39486 | High | 8.5 | 2025-06-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Rankie valvepress-rankie allows SQL Injection… |
CVE-2025-5395 | High | 8.8 | 2025-06-11 | The WordPress Automatic Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'core.php' file in… |
CVE-2025-47534 | Medium | 4.3 | 2025-05-16 | Missing Authorization vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-39511 | Medium | 4.3 | 2025-05-16 | Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-39493 | Medium | 4.3 | 2025-05-16 | Missing Authorization vulnerability in ValvePress Rankie valvepress-rankie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2024-4849 | Medium | 6.4 | 2024-05-18 | The WordPress Automatic Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and includ… |
CVE-2024-32693 | High | 7.6 | 2024-04-22 | Cross-Site Request Forgery (CSRF) vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0. |
CVE-2024-27956 | Critical | 9.9 | 2024-03-21 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affe… |
CVE-2021-4380 | Critical | 9.8 | 2023-06-07 | The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wp_pinterest_automatic_parse_reques… |
CVE-2021-4374 | Critical | 9.1 | 2023-06-07 | The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing author… |