Nextscripts - vulnerabilities (CVEs)
12 CVEs in 3 products, 0 in the last 30 days, newest from 2026-03-10.
Products
- Social Networks Auto Poster - 10 CVEs
- Nextscripts Social Networks Auto-poster - 7 CVEs
- Nextscripts - 2 CVEs
Newest CVEs of Nextscripts
- CVE-2026-3228 - CVSS 6.4 (medium), 2026-03-10: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[nxs_fbembed]` shortcode in all…
- CVE-2026-27379 - CVSS 8.8 (high), 2026-03-05: Deserialization of Untrusted Data vulnerability in NextScripts NextScripts social-networks-auto-poster-facebook-twitter-g allows Object Injection.This issue…
- CVE-2020-36831 - CVSS 6.5 (medium), 2024-10-16: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on multiple user…
- CVE-2024-37275 - CVSS 7.1 (high), 2024-07-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NextScripts NextScripts…
- CVE-2024-1762 - CVSS 6.1 (medium), 2024-05-22: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTTP_USER_AGENT header in all versions…
- CVE-2024-1446 - CVSS 5.4 (medium), 2024-05-22: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.4.3.…
- CVE-2024-2088 - CVSS 8.5 (high), 2024-05-22: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3…
- CVE-2023-49183 - CVSS 7.1 (high), 2023-12-15: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NextScripts NextScripts: Social Networks Auto-Poster…
- CVE-2021-25072 - CVSS 6.5 (medium), 2022-02-01: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.25 does not have CSRF check in place when deleting items, allowing attacker to make a…
- CVE-2021-24975 - CVSS 6.1 (medium), 2022-02-01: The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related…
- CVE-2021-38356 - CVSS 6.1 (medium), 2021-11-01: The NextScripts: Social Networks Auto-Poster <= 4.3.20 WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $_REQUEST['page'] parameter…
- CVE-2019-9911 - CVSS 6.1 (medium), 2019-03-22: The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edit item XSS.
