syncpostwithothersite records

2 published records for vendor syncpostwithothersite.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2024-32082No exploit	WordPress Sync Post With Other Site plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) to XSS vulnerabilitysyncpostwithothersite · sync post with other site · CWE-352 Pre-auth XSS CSRF	Medium6.1	—	0.2%	Apr 15, 2024
17Monitor	CVE-2024-6709No exploit	Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Updatesyncpostwithothersite · sync post with other site · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.3%	Aug 3, 2024

CVE-2024-32082
24Monitor
WordPress Sync Post With Other Site plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) to XSS vulnerability
MediumCVSS 6.1No exploitEPSS 0%
syncpostwithothersite · sync post with other siteApr 15, 2024
CVE-2024-6709
17Monitor
Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
syncpostwithothersite · sync post with other siteAug 3, 2024