Extension WordPress
Vulnérabilités NextScripts: Social Networks Auto-Poster
Cette page rassemble les failles publiées pour NextScripts: Social Networks Auto-Poster, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de NextScripts: Social Networks Auto-Poster
14 fiches
NextScripts: Social Networks Auto-Poster <= 4.4.6 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[nxs_fbembed]` shortcode in all versions up to, and including, 4.4.6. This is due to insufficient input sanitization and output escaping on the…
*-4.4.6
4.4.7
09/03/2026
NextScripts: Social Networks Auto-Poster <= 4.4.7 – Authenticated (Contributor+) PHP Object Injection
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.7 via deserialization of untrusted input. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-4.4.7
Non indiqué
24/02/2026
NextScripts <= 4.4.6 – Reflected Cross-Site Scripting
The NextScripts plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-4.4.6
Non indiqué
27/06/2024
NextScripts: Social Networks Auto-Poster <= 4.4.3 – Cross-Site Request Forgery to Arbitrary Post Deletion
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.4.3. This is due to missing or incorrect nonce validation on the nxssnap-reposter page. This makes it…
*-4.4.3
4.4.4
21/05/2024
NextScripts: Social Networks Auto-Poster <= 4.4.3 – Authenticated(Subscriber+) Sensitive Information Exposure
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3 via the 'nxs_getExpSettings' function. This makes it possible for authenticated attackers, with subscriber access and above,…
*-4.4.3
4.4.4
21/05/2024
NextScripts: Social Networks Auto-Poster <= 4.4.3 – Unauthenticated Stored Cross-Site Scripting via User Agent
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTTP_USER_AGENT header in all versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping. This makes it possible…
*-4.4.3
4.4.4
21/05/2024
NextScripts <= 4.4.2 – Reflected Cross-Site Scripting via code
The NextScripts plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘code’ parameter in versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-4.4.2
4.4.3
29/11/2023
NextScripts: Social Networks Auto-Poster <= 4.3.25 – Reflected Cross-Site Scripting
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in versions up to, and including, 4.3.25. This makes it possible for…
*-4.3.25
4.3.26
04/07/2022
NextScripts: Social Networks Auto-Poster <= 4.3.24 – Arbitrary Post Deletion via Cross-Site Request Forgery
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.25 does not have CSRF check in place when deleting items, allowing attacker to make a logged in admin delete arbitrary posts via a CSRF attack
[*, 4.3.25)
4.3.25
03/01/2022
NextScripts: Social Networks Auto-Poster <= 4.3.23 – Unauthenticated Stored Cross-Site Scripting
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue
[*, 4.3.24)
4.3.24
03/01/2022
NextScripts: Social Networks Auto-Poster <= 4.3.20 – Reflected Cross-Site Scripting
The NextScripts: Social Networks Auto-Poster
*-4.3.20
4.3.21
28/11/2021
NextScripts: Social Networks Auto-Poster <= 4.3.17 – Missing Authorization
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on multiple user privilege/security functions provided in versions up to, and including 4.3.17. This makes it possible for low-privileged attackers,…
*-4.3.17
4.3.18
05/09/2020
NextScripts: Social Networks Auto-Poster <= 4.2.7 – Reflected Cross-Site Scripting
The NextScripts: Social Networks Auto-Poster plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edit item XSS.
[*, 4.2.8)
4.2.8
05/02/2019
NextScripts: Social Networks Auto-Poster <= 3.4.17 – Stored Cross-Site Scripting
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nxsMainFromElementAccts’ parameter in versions before 3.4.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
[*, 3.4.18)
3.4.18
25/05/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.