Vulnerabilities

TI-2025-23644 CVE-2025-32579 · GHSA-xx2q-wc64-gcw2

WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability

MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in SoftClever Limited Sync Posts sync-posts allows Upload a Web Shell to a Web Server.This issue affects Sync Posts: from n/a through <= 1.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00756 Published 2025-04-11 No fix listed CWE-434

TI-2024-37073 CVE-2024-56037 · GHSA-45xc-4wjq-9987

WordPress User Referral plugin <= 8.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftClever Limited User Referral user-referral-free allows Reflected XSS.This issue affects User Referral: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0027 Published 2025-01-02 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability

WordPress User Referral plugin <= 8.0 - Reflected Cross Site Scripting (XSS) vulnerability