The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on multiple user privilege/security functions provided in versions up to, and including 4.3.17. This makes it possible for low-privileged attackers, like subscribers, to perform restricted actions that would be otherwise locked to a administrative-level user.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Social Networks Auto Poster Facebook Twitter G Plugin | — | Update social-networks-auto-poster-facebook-twitter-g plugin to version 4.3.18, or a newer patched version | May 15, 2025 | Sep 5, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub