Social Auto Poster vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SA

Product

Social Auto Poster

by wpweb · last CVE Oct 20, 2024

9

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 3Medium 6Low 0

Severity

All severities9 Critical0 High3 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Social Auto Poster to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-49272	8.8	0%	Oct 20	WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 5.3.15
CVE-2024-6756	8.8	1%	Jul 24	Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload Affected: through 5.3.14
CVE-2024-6750	7.5	0%	Jul 24	Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions Affected: through 5.3.14
CVE-2024-6751	6.5	0%	Jul 24	Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions Affected: through 5.3.14
CVE-2024-47369	6.1	0%	Oct 5	WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 5.3.15
CVE-2024-6753	6.1	1%	Jul 24	Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting Affected: through 5.3.14
CVE-2024-6752	5.4	0%	Jul 24	Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting Affected: through 5.3.14
CVE-2024-6755	5.3	0%	Jul 24	Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion Affected: through 5.3.14
CVE-2024-6754	4.3	0%	Jul 24	Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template Affected: through 5.3.14