Wordpress Automatic Plugin Security Vulnerabilities and Issues — Wordpress Automatic Plugin CVE List

Lucene search

ValvepressWordpress Automatic Plugin

3 matches found

CVE•added 2024/03/21 5:15 p.m.•315 views

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.

9.9CVSS9.7AI score0.93359EPSS

CVE•added 2024/04/22 8:15 a.m.•63 views

CVE-2024-32693

Cross-Site Request Forgery (CSRF) vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0.

7.6CVSS6.9AI score0.00104EPSS

CVE•added 2024/05/18 6:15 a.m.•52 views

CVE-2024-4849

The WordPress Automatic Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 3.94.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor...

6.4CVSS5.7AI score0.00145EPSS