Lucene search
K

21 matches found

Nuclei
Nuclei
added 18 hours ago10 views

Pinterest Automatic < 4.14.4 - Unauthenticated Arbitrary Options Update

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS7.7AI score0.80722EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-15497

Malicious code in bioql PyPI...

4.3CVSS6.2AI score0.00168EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-24746

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00063EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.2 views

CVE-2025-39510

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...

8.5CVSS5.9AI score0.00063EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 11:15 a.m.2 views

CVE-2025-39510

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...

8.5CVSS0.00063EPSS
Exploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.10 views

CVE-2025-39510

CVE-2025-39510 affects the WordPress plugin “Pinterest Automatic Pin” (ValvePress). The issue is an SQL Injection due to improper neutralization of inputs in the plugin prior to version 4.19.0. Affected versions are those before 4.19.0 (reported as

8.5CVSS5.9AI score0.00063EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.7 views

CVE-2025-39510 WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...

8.5CVSS0.00063EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.2 views

WordPress plugin Pinterest Automatic Pin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Pinterest...

8.5CVSS7.7AI score0.00063EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/18 4:2 p.m.10 views

CVE-2025-39511

Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinterest Automatic Pin: from n/a through = 4.19.0...

4.3CVSS7.2AI score0.00168EPSS
Exploits0References1
NVD
NVD
added 2025/05/16 4:15 p.m.7 views

CVE-2025-39511

Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinterest Automatic Pin: from n/a through = 4.19.0...

4.3CVSS0.00168EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/16 3:45 p.m.14 views

CVE-2025-39511 WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinterest Automatic Pin: from n/a through = 4.19.0...

4.3CVSS0.00168EPSS
Exploits0References1
CVE
CVE
added 2025/05/16 3:45 p.m.21 views

CVE-2025-39511

CVE-2025-39511 refers to a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin Pinterest Automatic Pin (ValvePress). Affected versions are reported as n/a through 4.18.2. The underlying issue is misconfigured access controls that could allow unauthorized access or ...

4.3CVSS7.2AI score0.00168EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/16 3:45 p.m.8 views

CVE-2025-39511 WordPress Pinterest Automatic Pin <= 4.18.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pinterest Automatic Pin: from n/a through 4.18.2...

4.3CVSS6.9AI score0.00168EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/16 12:50 p.m.6 views

WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Pinterest Automatic Pin versions = 4.19.0...

4.3CVSS8.2AI score0.00168EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/16 12:0 a.m.1 views

PT-2025-21703 · Valvepress · Valvepress Pinterest Automatic Pin

Name of the Vulnerable Software and Affected Versions: ValvePress Pinterest Automatic Pin versions n/a through 4.18.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

4.3CVSS5.4AI score0.00168EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.1 views

WordPress plugin Pinterest Automatic Pin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS6AI score0.00168EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/06 4:20 a.m.8 views

CVE-2021-4380

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS6.8AI score0.80722EPSS
Exploits1References1
NVD
NVD
added 2023/06/07 1:15 p.m.10 views

CVE-2021-4380

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS9.5AI score0.80722EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/06/07 12:43 p.m.9 views

CVE-2021-4380 Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS7.3AI score0.80722EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/06/07 12:0 a.m.3 views

WordPress Plugin Pinterest Automatic 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress Plugin Pinterest Automatic...

9.8CVSS8.3AI score0.80722EPSS
Exploits1References5
Rows per page
Query Builder