ValvePress

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ValvePress records in CISA KEV

No ValvePress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Automatic 1 record CRITICAL Pinterest Automatic Pin 1 record MEDIUM Rankie 1 record LOW Wordpress Automatic Plugin 1 record HIGH

Records

1 record in Pinterest Automatic Pin · all components

TI-2021-03237 CVE-2021-4380 · GHSA-mmhw-42fh-v6gr

Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

MEDIUM 56

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wp_pinterest_automatic_parse_request' function and the 'process_form.php' script in versions up…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04491 Published 2023-06-07 No fix listed CWE-284

Open these records in search →

Critical	3
High	8
Medium	4
Low	0
No CVSS	0