nextscripts records

10 published records for vendor nextscripts.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 10%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2021-25072No exploit	NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRFnextscripts · social networks auto poster · CWE-352 Pre-auth CSRF	Medium6.5	—	0.5%	Feb 1, 2022
26Monitor	CVE-2020-36831No exploit	NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorizationnextscripts · social networks auto poster · CWE-284 Broken access control (IDOR)	Medium6.5	—	0.5%	Oct 16, 2024
26Monitor	CVE-2024-2088No exploit	NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposurenextscripts · social networks auto poster · CWE-202	Medium6.5	—	0.3%	May 22, 2024
24Monitor	CVE-2021-24975No exploit	NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSSnextscripts · social networks auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	1.3%	Feb 1, 2022
24Monitor	CVE-2019-9911No exploit	The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edinextscripts · social networks auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	1.3%	Mar 21, 2019
24Monitor	CVE-2021-38356No exploit	NextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site Scriptingnextscripts · social networks auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Nov 1, 2021
24Monitor	CVE-2023-49183No exploit	WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)nextscripts · social networks auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 15, 2023
24Monitor	CVE-2024-1762No exploit	NextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agentnextscripts · social networks auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	May 22, 2024
24Monitor	CVE-2024-37275No exploit	WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerabilitynextscripts · social networks auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jul 22, 2024
17Monitor	CVE-2024-1446No exploit	NextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletionnextscripts · social networks auto poster · CWE-352 Pre-auth CSRF	Medium4.3	—	0.2%	May 22, 2024

CVE-2021-25072
26Monitor
NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- CSRF
nextscripts · social networks auto posterFeb 1, 2022
CVE-2020-36831
26Monitor
NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization
MediumCVSS 6.5No exploitEPSS 1%
- Broken access control (IDOR)
nextscripts · social networks auto posterOct 16, 2024
CVE-2024-2088
26Monitor
NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure
MediumCVSS 6.5No exploitEPSS 0%
nextscripts · social networks auto posterMay 22, 2024
CVE-2021-24975
24Monitor
NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
nextscripts · social networks auto posterFeb 1, 2022
CVE-2019-9911
24Monitor
The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edi
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
nextscripts · social networks auto posterMar 21, 2019
CVE-2021-38356
24Monitor
NextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
nextscripts · social networks auto posterNov 1, 2021
CVE-2023-49183
24Monitor
WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
nextscripts · social networks auto posterDec 15, 2023
CVE-2024-1762
24Monitor
NextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
nextscripts · social networks auto posterMay 22, 2024
CVE-2024-37275
24Monitor
WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
nextscripts · social networks auto posterJul 22, 2024
CVE-2024-1446
17Monitor
NextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletion
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
nextscripts · social networks auto posterMay 22, 2024