Advisories · Technology

NextScripts: Social Networks Auto-Poster.

Every CVE that names NextScripts: Social Networks Auto-Poster among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97227 CVE record

CVSS 5.9 Medium

NextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data Deletion
- NextScripts: Social Networks Auto-Poster
- Broken access control
Not analysed yet 27 Sept 2026
CVE-2026-16570 CVE record

CVSS 7.1 High

NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback
- NextScripts: Social Networks Auto-Poster
- Cross-site scripting (XSS)
Not analysed yet 19 Aug 2026
CVE-2026-3228 CVE record

CVSS 6.4 Medium

NextScripts: Social Networks Auto-Poster <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode
- NextScripts: Social Networks Auto-Poster
- Cross-site scripting (XSS)
Not analysed yet 10 Mar 2026
CVE-2020-36831 CVE record

CVSS 5.0 Medium

NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization
- NextScripts: Social Networks Auto-Poster
- Broken access control
Not analysed yet 16 Oct 2024
CVE-2024-1762 CVE record

CVSS 6.1 Medium

NextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent
- NextScripts: Social Networks Auto-Poster
- Cross-site scripting (XSS)
Not analysed yet 22 May 2024
CVE-2024-2088 CVE record

CVSS 8.5 High

NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure
- NextScripts: Social Networks Auto-Poster
- CWE-202
Not analysed yet 22 May 2024
CVE-2024-1446 CVE record

CVSS 5.4 Medium

NextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletion
- NextScripts: Social Networks Auto-Poster
- Cross-site request forgery (CSRF)
Not analysed yet 22 May 2024
CVE-2023-49183 CVE record

CVSS 7.1 High

WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)
- NextScripts: Social Networks Auto-Poster
- Cross-site scripting (XSS)
Not analysed yet 15 Dec 2023
CVE-2021-25072 CVE record

NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF
- NextScripts: Social Networks Auto-Poster
- Cross-site request forgery (CSRF)
Not analysed yet 1 Feb 2022
CVE-2021-24975 CVE record

NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
- NextScripts: Social Networks Auto-Poster
- Cross-site scripting (XSS)
Not analysed yet 1 Feb 2022
CVE-2021-38356 CVE record

CVSS 6.1 Medium

NextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site Scripting
- NextScripts: Social Networks Auto-Poster
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2021