CVE-2025-39511: Valvepress Pinterest Automatic Pin

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinterest Automatic Pin: from n/a through <= 4.19.0.

Affected products

• Valvepress Pinterest Automatic Pin: up to and including 4.19.0

Published 2025-05-16. Last modified 2026-06-17.