Skip to content
OpenAdvisories

Product · WPWeb

Social Auto Poster

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2024-47369

    WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb Social Auto Poster social-auto-poster allows Reflected XSS.This issue affects Social Auto Poster: from n/a through <= 5.3.15.

    WPWeb Social Auto Poster
  • High 7.2
    CVE-2024-6753 Scanner template

    Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting

    The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poster_map_wordpress_post_type' AJAX function in all versions up to, and including, 5.3.14 due to insufficient input sanitiz…

    WPWeb Social Auto Poster Web / CMS
  • High 7.3
    CVE-2024-6750

    Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions

    The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.3.14. This makes it possible for unauthenticated a…

    WPWeb Social Auto Poster Web / CMS
  • High 8.8
    CVE-2024-6756

    Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload

    The Social Auto Poster plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpw_auto_poster_get_image_path' function in all versions up to, and including, 5.3.14. This makes it possible for authenticated att…

    WPWeb Social Auto Poster Web / CMS