Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09995
HistoryFeb 10, 2022 - 12:00 a.m.

WordPress NextScripts:Social Networks Auto-Poster plugin cross-site request forgery vulnerability

2022-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

26.3%

WordPress is the WordPress Foundationโ€™s suite of blogging platforms developed using the PHP language. WordPress NextScripts:Social Networks Auto-Poster plugin is vulnerable to cross-site request forgery in versions prior to 4.3.25. The vulnerability stems from the fact that there is no CSRF check feature, an attacker can use this vulnerability to log into the administrator account to delete arbitrary posts.

0.001 Low

EPSS

Percentile

26.3%