WordPress plugin
Social Auto Poster security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium6
- Low0
All Social Auto Poster vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery ≤5.3.15Update to 5.3.16 | CVE-2024-49272 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.3.15Update to 5.3.16 | CVE-2024-47369 | |
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤5.3.14Update to 5.3.15 | CVE-2024-6752 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.3.14Update to 5.3.15 | CVE-2024-6753 | |
| High8.8 | Authenticated (Contributor+) Arbitrary File Upload ≤5.3.14Update to 5.3.15 | CVE-2024-6756 | |
| Medium6.3 | Cross-Site Request Forgery via Multiple Functions ≤5.3.14Update to 5.3.15 | CVE-2024-6751 | |
| Medium6.5 | Missing Authorization to Unauthenticated Arbitrary Post Deletion ≤5.3.14Update to 5.3.15 | CVE-2024-6755 | |
| Medium5.4 | Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template ≤5.3.14Update to 5.3.15 | CVE-2024-6754 | |
| High7.3 | Missing Authorization via Multiple Functions ≤5.3.14Update to 5.3.15 | CVE-2024-6750 |
- Medium4.3Cross-Site Request Forgery
≤5.3.15Update to 5.3.16
- Medium6.1Reflected Cross-Site Scripting
≤5.3.15Update to 5.3.16
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤5.3.14Update to 5.3.15
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.3.14Update to 5.3.15
- High8.8Authenticated (Contributor+) Arbitrary File Upload
≤5.3.14Update to 5.3.15
- Medium6.3Cross-Site Request Forgery via Multiple Functions
≤5.3.14Update to 5.3.15
- Medium6.5Missing Authorization to Unauthenticated Arbitrary Post Deletion
≤5.3.14Update to 5.3.15
- Medium5.4Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template
≤5.3.14Update to 5.3.15
- High7.3Missing Authorization via Multiple Functions
≤5.3.14Update to 5.3.15
Social Auto Poster: common questions
Does Social Auto Poster have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Social Auto Poster: 3 high, 6 medium. None are known to affect version null.
How do I check which version of Social Auto Poster I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Social Auto Poster vulnerability?
CVE-2024-49272, published Oct 14, 2024: Social Auto Poster <= 5.3.15 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any Social Auto Poster vulnerability listed in CISA KEV?
No. None of the known Social Auto Poster vulnerabilities is currently listed in the CISA KEV catalog.