Valvepress Pinterest Automatic Pin vulnerabilities

CVE-2021-4380 [CRITICAL] CWE-284 CVE-2021-4380: The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing ca The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wp_pinterest_automatic_parse_request' function and the 'process_form.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to update arbitrary options on a site that can be u

CVE-2025-39510 [HIGH] CWE-89 CVE-2025-39510: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through < 4.19.0.

CVE-2025-39511 [MEDIUM] CWE-862 CVE-2025-39511: Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic all Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinterest Automatic Pin: from n/a through <= 4.19.0.