Read the docs

wpwebinfotech

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

wpwebinfotech records in CISA KEV

No wpwebinfotech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Social Auto Poster 9 records MEDIUM

Records

9 records in Social Auto Poster · all components

TI-2024-06263 CVE-2024-6756 · GHSA-7vg8-pfw4-vmjp

Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload

Priority MEDIUM 41

The Social Auto Poster plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpw_auto_poster_get_image_path' function in all versions up to, and including, 5.3.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00786 Published 2024-07-24 No fix listed CWE-434
TI-2024-06262 CVE-2024-6755 · GHSA-f7wp-vx7r-p4vf

Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

Priority LOW 35

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the ‘wpw_auto_poster_quick_delete_multiple’ function in all versions up to, and…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00317 Published 2024-07-24 No fix listed CWE-862
TI-2024-06260 CVE-2024-6753 · GHSA-2vfh-6ppw-453g

Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 33

The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poster_map_wordpress_post_type' AJAX function in all versions up to, and including, 5…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00822 Published 2024-07-24 No fix listed CWE-79
TI-2024-06257 CVE-2024-6750 · GHSA-r768-6rj3-3r5q

Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions

Priority LOW 33

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.3.14.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00285 Published 2024-07-24 No fix listed CWE-862
TI-2024-31687 CVE-2024-47369 · GHSA-628q-jwqh-qqc2

WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb Social Auto Poster social-auto-poster allows Reflected XSS.This issue affects Social Auto Poster: from n/a throu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-10-05 No fix listed CWE-79
TI-2024-06259 CVE-2024-6752 · GHSA-w6wr-vw8p-992f

Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Priority LOW 28

The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_name’ parameter in the 'wpw_auto_poster_map_wordpress_post_type' AJAX function in all versions up to, and including, 5.…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00257 Published 2024-07-24 No fix listed CWE-79
TI-2024-06261 CVE-2024-6754 · GHSA-gm9c-2h9v-jgp5

Missing authorization in WPWeb Social Auto Poster

Priority LOW 24

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the ‘wpw_auto_poster_update_tweet_template’ function in all versions up to, and including, 5…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00264 Published 2024-07-24 No fix listed CWE-862
Open these records in search →