CVE-2024-31345: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2...

PT-2024-23988 · Unknown · Sukhchain Singh Auto Poster

Name of the Vulnerable Software and Affected Versions: Sukhchain Singh Auto Poster versions 1.2 and earlier Description: The issue affects the Auto Poster, allowing for the unrestricted upload of files with dangerous types. Recommendations: For versions 1.2 and earlier, update to a version that...

WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin Auto Poster versions = 1.2...

WordPress Auto Poster Plugin <= 1.2 is vulnerable to Arbitrary File Upload

Software Auto Poster Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Upload CVE CVE-2024-31345 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 328c54e266f4 Credits younsoung kim, SeoHyeon Lee,...

CVE-2023-49183

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NextScripts NextScripts: Social Networks Auto-Poster allows Reflected XSS.This issue affects NextScripts: Social Networks Auto-Poster: from n/a through 4.4.2...

CVE-2023-49183

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NextScripts NextScripts: Social Networks Auto-Poster allows Reflected XSS.This issue affects NextScripts: Social Networks Auto-Poster: from n/a through 4.4.2...

CVE-2023-49183

CVE-2023-49183 is a reflected XSS in NextScripts: Social Networks Auto-Poster for WordPress, affecting versions up to 4.4.2. Root cause: improper input handling for the 'code' parameter leading to unescaped output. Impact stated in sources: Reflected XSS; exploitation could occur via crafted inpu...

WordPress Plugin NextScripts: Social Networks Auto-Poster Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin NextScripts: Social Networks Auto-Poste...

CVE-2023-49183: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NextScripts NextScripts: Social Networks Auto-Poster allows Reflected XSS.This issue affects NextScripts: Social Networks Auto-Poster: from n/a through 4.4.2...

CVE-2023-26532

Cross-Site Request Forgery CSRF vulnerability in AccessPress Themes Social Auto Poster plugin = 2.1.4 versions...

CVE-2023-26532

Cross-Site Request Forgery CSRF vulnerability in AccessPress Themes Social Auto Poster plugin = 2.1.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in AccessPress Themes Social Auto Poster plugin = 2.1.4 versions...

CVE-2023-26532

The CVE-2023-26532 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the AccessPress Themes Social Auto Poster plugin for WordPress, affecting versions up to and including 2.1.4. Root cause: CSRF could allow unauthorized actions on behalf of a logged-in user (or unauthenticated...

WordPress Plugin Social Auto Poster Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-20708 · Accesspress Themes · Accesspress Themes Social Auto Poster

Name of the Vulnerable Software and Affected Versions: AccessPress Themes Social Auto Poster plugin versions = 2.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a...

CVE-2023-26532: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AccessPress Themes Social Auto Poster plugin = 2.1.4 versions...

WordPress Social Auto Poster Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Social Auto Poster Type Plugin Vulnerable versions = 2.1.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-26532 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b93187b5b665 Credits Rio Darmawan...

NextScripts: Social Networks Auto-Poster < 4.3.26 - Reflected Cross-Site Scripting

The plugin does not escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting PoC https://example.com/wp-admin/admin.php?page=nxssnap"...

WordPress NextScripts: Social Networks Auto-Poster plugin <= 4.3.25 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress NextScripts: Social Networks Auto-Poster plugin versions = 4.3.25. Solution Update the WordPress NextScripts plugin to the latest available version at least 4.3.26...

WordPress NextScripts:Social Networks Auto-Poster plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. WordPress NextScripts:Social Networks Auto-Poster plugin is vulnerable to cross-site request forgery in versions prior to 4.3.25. The vulnerability stems from the fact that there is no CSRF check...