Nextscripts Social Networks Auto-poster (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-27. Vendor: Unknown.

CVEs of Nextscripts Social Networks Auto-poster

• CVE-2026-97227 - CVSS 5.9 (medium), 2026-09-27: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership checks on several of its AJAX actions,…
• CVE-2026-16570 - CVSS 7.1 (high), 2026-08-19: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its…
• CVE-2021-25072 - CVSS 6.5 (medium), 2022-02-01: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.25 does not have CSRF check in place when deleting items, allowing attacker to make a…
• CVE-2021-24975 - CVSS 6.1 (medium), 2022-02-01: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related…