WordPress plugin
NextScripts: Social Networks Auto-Poster security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium13
- Low0
All NextScripts: Social Networks Auto-Poster vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤4.4.7Update to 4.4.8 | CVE-2026-97227 | |
| Medium6.1 | Reflected Cross-Site Scripting <4.4.8Update to 4.4.8 | CVE-2026-16570 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode ≤4.4.6Update to 4.4.7 | CVE-2026-3228 | |
| High7.5 | Authenticated (Contributor+) PHP Object Injection ≤4.4.7Update to 4.4.8 | CVE-2026-27379 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤4.4.7Update to 4.4.8 | CVE-2024-37275 | |
| Medium5.4 | Cross-Site Request Forgery to Arbitrary Post Deletion ≤4.4.3Update to 4.4.4 | CVE-2024-1446 | |
| High8.5 | Authenticated(Subscriber+) Sensitive Information Exposure ≤4.4.3Update to 4.4.4 | CVE-2024-2088 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting via User Agent ≤4.4.3Update to 4.4.4 | CVE-2024-1762 | |
| Medium6.1 | Reflected Cross-Site Scripting via code ≤4.4.2Update to 4.4.3 | CVE-2023-49183 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤4.3.25Update to 4.3.26 | — | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting <4.3.24Update to 4.3.24 | CVE-2021-24975 | |
| Medium6.5 | Arbitrary Post Deletion via Cross-Site Request Forgery <4.3.25Update to 4.3.25 | CVE-2021-25072 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤4.3.20Update to 4.3.21 | CVE-2021-38356 | |
| Medium5.0 | Missing Authorization ≤4.3.17Update to 4.3.18 | CVE-2020-36831 | |
| Medium6.1 | Reflected Cross-Site Scripting <4.2.8Update to 4.2.8 | CVE-2019-9911 | |
| High7.2 | Stored Cross-Site Scripting <3.4.18Update to 3.4.18 | — |
- Medium4.3Missing Authorization
≤4.4.7Update to 4.4.8
- Medium6.1Reflected Cross-Site Scripting
<4.4.8Update to 4.4.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode
≤4.4.6Update to 4.4.7
- High7.5Authenticated (Contributor+) PHP Object Injection
≤4.4.7Update to 4.4.8
- Medium6.1Reflected Cross-Site Scripting
≤4.4.7Update to 4.4.8
- Medium5.4Cross-Site Request Forgery to Arbitrary Post Deletion
≤4.4.3Update to 4.4.4
- High8.5Authenticated(Subscriber+) Sensitive Information Exposure
≤4.4.3Update to 4.4.4
- Medium6.1Unauthenticated Stored Cross-Site Scripting via User Agent
≤4.4.3Update to 4.4.4
- Medium6.1Reflected Cross-Site Scripting via code
≤4.4.2Update to 4.4.3
- Medium6.1Reflected Cross-Site Scripting
≤4.3.25Update to 4.3.26
- Medium6.1Unauthenticated Stored Cross-Site Scripting
<4.3.24Update to 4.3.24
- Medium6.5Arbitrary Post Deletion via Cross-Site Request Forgery
<4.3.25Update to 4.3.25
- Medium6.1Reflected Cross-Site Scripting
≤4.3.20Update to 4.3.21
- Medium5.0Missing Authorization
≤4.3.17Update to 4.3.18
- Medium6.1Reflected Cross-Site Scripting
<4.2.8Update to 4.2.8
- High7.2Stored Cross-Site Scripting
<3.4.18Update to 3.4.18
NextScripts: Social Networks Auto-Poster: common questions
Does NextScripts: Social Networks Auto-Poster have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in NextScripts: Social Networks Auto-Poster: 3 high, 13 medium. None are known to affect version null.
How do I check which version of NextScripts: Social Networks Auto-Poster I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent NextScripts: Social Networks Auto-Poster vulnerability?
CVE-2026-97227, published Sep 25, 2026: NextScripts: Social Networks Auto-Poster <= 4.4.7 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any NextScripts: Social Networks Auto-Poster vulnerability listed in CISA KEV?
No. None of the known NextScripts: Social Networks Auto-Poster vulnerabilities is currently listed in the CISA KEV catalog.