wpwebinfotech records

9 published records for vendor wpwebinfotech.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 22.2%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-6756No exploit	Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Uploadwpwebinfotech · social auto poster · CWE-434 RCE File upload	High8.8	—	0.8%	Jul 23, 2024
35Monitor	CVE-2024-49272No exploit	WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerabilitywpwebinfotech · social auto poster · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Oct 20, 2024
30Monitor	CVE-2024-6750No exploit	Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functionswpwebinfotech · social auto poster · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Jul 23, 2024
26Monitor	CVE-2024-6751No exploit	Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functionswpwebinfotech · social auto poster · CWE-352 Pre-auth CSRF	Medium6.5	—	0.2%	Jul 23, 2024
24Monitor	CVE-2024-6753Proof of concept	Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scriptingwpwebinfotech · social auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Jul 23, 2024
24Monitor	CVE-2024-47369No exploit	WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerabilitywpwebinfotech · social auto poster · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Oct 5, 2024
21Monitor	CVE-2024-6755No exploit	Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletionwpwebinfotech · social auto poster · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.3%	Jul 23, 2024
21Monitor	CVE-2024-6752No exploit	Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scriptingwpwebinfotech · social auto poster · CWE-79 XSS	Medium5.4	—	0.3%	Jul 23, 2024
17Monitor	CVE-2024-6754No exploit	Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_templatewpwebinfotech · social auto poster · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.3%	Jul 23, 2024

CVE-2024-6756
35Monitor
Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 1%
- RCE
- File upload
wpwebinfotech · social auto posterJul 23, 2024
CVE-2024-49272
35Monitor
WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
wpwebinfotech · social auto posterOct 20, 2024
CVE-2024-6750
30Monitor
Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpwebinfotech · social auto posterJul 23, 2024
CVE-2024-6751
26Monitor
Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
wpwebinfotech · social auto posterJul 23, 2024
CVE-2024-6753
24Monitor
Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
wpwebinfotech · social auto posterJul 23, 2024
CVE-2024-47369
24Monitor
WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
wpwebinfotech · social auto posterOct 5, 2024
CVE-2024-6755
21Monitor
Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpwebinfotech · social auto posterJul 23, 2024
CVE-2024-6752
21Monitor
Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpwebinfotech · social auto posterJul 23, 2024
CVE-2024-6754
17Monitor
Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
wpwebinfotech · social auto posterJul 23, 2024