VValvePress

Products

Exploited and recent CVEs

• CVE-2026-56045 High 7.1 WordPress Automatic plugin < 3.135.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-6247 Medium 4.7 WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.2%
• CVE-2025-39510 High 8.5 WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability 0.3%
• CVE-2025-46500 High 7.1 WordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-39487 High 7.1 WordPress Rankie plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-39486 High 8.5 WordPress Rankie plugin < 1.8.2 - SQL Injection vulnerability 0.3%
• CVE-2025-5395 High 8.8 WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload 0.8%
• CVE-2025-39493 Medium 4.3 WordPress Rankie plugin < 1.8.2 - Broken Access Control Vulnerability 0.4%
• CVE-2025-39511 Medium 4.3 WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control Vulnerability 0.3%
• CVE-2025-47534 Medium 4.3 WordPress Wordpress Auto Spinner plugin <= 3.25.0 - Broken Access Control Vulnerability 0.3%
• CVE-2024-4849 Medium 6.4 WordPress Automatic <= 3.94.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter 0.3%
• CVE-2024-32693 High 7.6 WordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-27956 Critical 9.9 WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability 94.1%
• CVE-2021-4380 Critical 9.8 Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update 4.5%
• CVE-2021-4374 Critical 9.1 WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update 16.4%