Vulnerabilities

TI-2026-01545 CVE-2026-1877 · GHSA-q5mx-w9gm-5h8v

Auto Post Scheduler <= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps_options_page

LOW 27

The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2026-03-31 No fix listed CWE-79

TI-2025-37498 CVE-2025-60132 · GHSA-ff6g-9x2f-3qgm

WordPress Video Blogster Lite Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in johnh10 Video Blogster Lite video-blogster-lite allows Stored XSS.This issue affects Video Blogster Lite: from n/a through <= 1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00127 Published 2025-10-22 No fix listed CWE-352

TI-2025-30186 CVE-2025-47689 · GHSA-3xq9-wx2h-2rrf

WordPress Video Blogster Lite plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in johnh10 Video Blogster Lite video-blogster-lite allows Reflected XSS.This issue affects Video Blogster Lite: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00249 Published 2025-08-14 No fix listed CWE-79

Vulnerabilities

Filters

Auto Post Scheduler <= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps_options_page

WordPress Video Blogster Lite Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Video Blogster Lite plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability