Advisories · Technology

f1logic WP2Social Auto Publish.

Every CVE that names f1logic WP2Social Auto Publish among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12042 CVE record

CVSS 4.4 Medium

WP2Social Auto Publish <= 2.4.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter
- f1logic WP2Social Auto Publish
- Cross-site scripting (XSS)
Not analysed yet 19 Sept 2026
CVE-2025-12064 CVE record

CVSS 6.1 Medium

WP2Social Auto Publish <= 2.4.7 - Reflected Cross-Site Scripting via PostMessage
- f1logic WP2Social Auto Publish
- Cross-site scripting (XSS)
Not analysed yet 8 Nov 2025