2 matches found
CVE-2024-12279
CVE-2024-12279 refers to the WP Social AutoConnect WordPress plugin (affected versions up to 4.6.2) and is due to missing or incorrect nonce validation, enabling an unauthenticated attacker to trigger a CSRF that can lead to a reflected XSS when an admin is tricked into performing an action. Word...
CVE-2023-37974
CVE-2023-37974 relates to the WordPress plugin WP Social AutoConnect (Justin Klein) version