CVE-2024-27956: Valvepress Automatic

Critical severity, CVSS 9.8. EPSS: 94.1% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.

Affected products

• Valvepress Automatic: up to and including 3.92.0

Published 2024-03-21. Last modified 2026-06-17.