Vulnerabilities in NextScripts
9 resultsVexday analysis
NextScripts apresenta 4 vulnerabilidades catalogadas, nenhuma delas em exploração ativa ou classificada como crítica, com predominância de falhas de injeção (CWE-79). O perfil de risco é baixo, sem publicações recentes que indiquem pressão imediata, embora a fraqueza dominante em XSS exija atenção em ciclos normais de patching.
CVE-2026-3228MEDIUMNextScripts: Social Networks Auto-Poster <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' ShortcodeEPSS 3.7%CVE-2021-38356MEDIUMNextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site ScriptingEPSS 0.8%CVE-2020-36831MEDIUMNextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing AuthorizationEPSS 0.5%CVE-2023-49183HIGHWordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-1762MEDIUMNextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User AgentEPSS 0.4%CVE-2026-27379HIGHWordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-2088HIGHNextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information ExposureEPSS 0.3%CVE-2024-37275HIGHWordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-1446MEDIUMNextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post DeletionEPSS 0.2%