Valvepress Automatic vulnerabilities

• valvepress automatic WordPress Automatic plugin < 3.135.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-56045 7.1 HighJune 26, 2026
• valvepress wordpress automatic plugin WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-6247 4.7 MediumAugust 26, 2025
• valvepress pinterest automatic pin WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability CVE-2025-39510 8.5 HighAugust 14, 2025
• valvepress wordpress automatic plugin WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload CVE-2025-5395 8.8 HighJune 11, 2025
• valvepress pinterest automatic pin WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control Vulnerability CVE-2025-39511 4.3 MediumMay 16, 2025
• valvepress wordpress automatic plugin WordPress Automatic <= 3.94.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter CVE-2024-4849 6.4 MediumMay 18, 2024
• valvepress automatic WordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability CVE-2024-27955 8.8 HighMay 17, 2024
• valvepress automatic WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability CVE-2024-27954 Public exploit EPSS 72.8% 9.3 CriticalMay 17, 2024
• valvepress automatic, wordpress automatic plugin +1 more WordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32693 7.6 HighApril 22, 2024
• valvepress automatic, wordpress automatic plugin +1 more WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability CVE-2024-27956 Public exploit EPSS 94.1% 9.9 CriticalMarch 21, 2024
• valvepress pinterest automatic, pinterest automatic pin +1 more Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update CVE-2021-4380 9.8 CriticalJune 7, 2023
• valvepress wordpress automatic plugin WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update CVE-2021-4374 EPSS 16.4% 9.1 CriticalJune 7, 2023