Skip to content
Noroxi

ValvePress records

5 published records for vendor valvepress.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 40%
Pre-auth RCE
0
With a fix record
80%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2024-27956
    67This week

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 94%

    valvepress · automaticMar 21, 2024

  • CVE-2021-4374
    60This week

    WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

    CriticalCVSS 9.8WeaponizedEPSS 16%

    valvepress · wordpress automatic pluginJun 6, 2023

  • CVE-2021-4380
    40Plan

    Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    valvepress · pinterest automatic pinJun 7, 2023

  • CVE-2025-39493
    35Monitor

    WordPress Rankie plugin < 1.8.2 - Broken Access Control Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    valvepress · rankieMay 16, 2025

  • CVE-2024-32693
    30Monitor

    WordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    valvepress · automaticApr 22, 2024