WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
social-media-feather
Published
2023-12-07
Title
Social Media Feather < 2.1.4 - Subscriber+ Unauthorised Action
Slug
social-media-links
Published
2025-04-17
Title
Social Media Links <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-media-sharing
Published
2024-12-12
Title
Social Media Sharing <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-media-shortcodes
Published
2024-12-11
Title
Social Media Shortcodes < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-media-shortcodes
Published
2025-09-16
Title
Social Media Shortcodes < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-media-widget
Published
2014-08-01
Title
Social Media Widget < 4.0.2 - Malicious Code
Slug
social-media-widget
Published
2014-08-01
Title
Social Media Widget 4.0 - social-widget.php MITM Weakness Arbitrary Code Injection
Slug
social-media-widget
Published
2024-06-21
Title
Social Media Widget < 4.0.9 - Admin+ Stored XSS
Slug
social-metrics
Published
2023-10-02
Title
Social Metrics <= 2.2 - Admin+ Stored XSS
Slug
social-metrics-tracker
Published
2019-09-18
Title
Social Metrics Tracker <= 1.6.8 - Unauthorised Data Export
Slug
social-network-tabs
Published
2019-01-16
Title
Social Network Tabs - Social Media API Key Leakage
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2015-05-25
Title
NextScripts: Social Networks Auto-Poster < 3.4.18 - CSRF to Stored XSS
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2019-02-05
Title
NextScripts: Social Networks Auto-Poster < 4.2.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2020-09-05
Title
NextScripts: Social Networks Auto-Poster < 4.3.18 - Insufficient Privilege Validation
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2021-10-29
Title
NextScripts: Social Networks Auto-Poster < 4.3.21 - Reflected Cross-Site Scripting
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2022-01-03
Title
NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2022-01-03
Title
NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2022-07-04
Title
NextScripts: Social Networks Auto-Poster < 4.3.26 - Reflected Cross-Site Scripting
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2023-11-29
Title
NextScripts < 4.4.3 - Reflected Cross-Site Scripting via code
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-05-21
Title
NextScripts: Social Networks Auto-Poster < 4.4.4 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-05-21
Title
NextScripts: Social Networks Auto-Poster < 4.4.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-05-21
Title
NextScripts: Social Networks Auto-Poster < 4.4.4 - Subscriber+ Sensitive Information Exposure
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-06-27
Title
NextScripts <= 4.4.6 - Reflected Cross-Site Scripting
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2026-02-24
Title
NextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated (Contributor+) PHP Object Injection
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2026-03-09
Title
NextScripts: Social Networks Auto-Poster < 4.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode