Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Syncpostwithothersite Clear all filters
TI-2024-06218 CVE-2024-6709 · GHSA-7698-w222-8jf9

Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update

Priority LOW 20

The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sps_add_update_post' function in all versions up to, and including, 1.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2024-08-03 No fix listed CWE-862
TI-2024-21159 CVE-2024-32082 · GHSA-6chc-hj4x-h3rh

WordPress Sync Post With Other Site plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) to XSS vulnerability

Priority LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Kamlesh Parmar Sync Post With Other Site sync-post-with-other-site allows Cross Site Request Forgery.This issue affects Sync Post With Other Site: from n/a through <= 1.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.002 Published 2024-04-15 No fix listed CWE-352