Read the docs

Syncpostwithothersite

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Syncpostwithothersite records in CISA KEV

No Syncpostwithothersite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sync Post With Other Site 2 records LOW

Records

2 records in Sync Post With Other Site · all components

TI-2024-21159 CVE-2024-32082 · GHSA-6chc-hj4x-h3rh

WordPress Sync Post With Other Site plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) to XSS vulnerability

Priority LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Kamlesh Parmar Sync Post With Other Site sync-post-with-other-site allows Cross Site Request Forgery.This issue affects Sync Post With Other Site: from n/a through <= 1.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.002 Published 2024-04-15 No fix listed CWE-352
TI-2024-06218 CVE-2024-6709 · GHSA-7698-w222-8jf9

Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update

Priority LOW 20

The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sps_add_update_post' function in all versions up to, and including, 1.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2024-08-03 No fix listed CWE-862
Open these records in search →