Extension WordPress

Vulnérabilités FS Poster – WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest]

Cette page rassemble les failles publiées pour FS Poster – WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest], leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
7,7CVSS maximal

Historique de sécurité

CVE et vulnérabilités de FS Poster – WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest]

4 fiches

CVE-2025-30960 Moyenne · 4,3
FS Poster – WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest]

FS Poster <= 6.5.8 – Missing Authorization

The FS Poster plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in all versions up to, and including, 6.5.8. This makes it possible for authenticated attackers, with Subscriber-level access…

Versions affectées

*-6.5.8

Correctif

7.1.8

Publication

15/04/2025

CVE-2025-30962 Moyenne · 6,1
FS Poster – WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest]

FS Poster <= 6.5.8 – Reflected Cross-Site Scripting

The FS Poster plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 6.5.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…

Versions affectées

*-6.5.8

Correctif

6.5.9

Publication

10/04/2025

CVE-2025-26978 Élevée · 7,7
FS Poster – WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest]

FS Poster <= 6.5.8 – Authenticated (Subscriber+) SQL Injection

The FS Poster – WordPress Social media Auto Poster & Scheduler plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.5.8 due to insufficient escaping on the user supplied parameter and lack…

Versions affectées

*-6.5.8

Correctif

6.5.9

Publication

24/02/2025

CVE-2024-37237 Moyenne · 4,3
FS Poster – WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest]

FS Poster <= 6.5.8 – Cross-Site Request Forgery

The FS Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.5.8. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers…

Versions affectées

*-6.5.8

Correctif

6.5.9

Publication

21/06/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités