NextScripts

Products

ProductCVEsExploitedLatest
NextScripts: Social Networks Auto-Poster7–Mar 10, 2026
NextScripts2–Mar 5, 2026

Exploited and recent CVEs

  • CVE-2026-3228 Medium 6.4 NextScripts: Social Networks Auto-Poster <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode 4.2%
  • CVE-2026-27379 High 8.8 WordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerability 0.4%
  • CVE-2020-36831 Medium 5.0 NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization 0.5%
  • CVE-2024-37275 High 7.1 WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-1762 Medium 6.1 NextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent 0.4%
  • CVE-2024-2088 High 8.5 NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure 0.3%
  • CVE-2024-1446 Medium 5.4 NextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletion 0.2%
  • CVE-2023-49183 High 7.1 WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2021-38356 Medium 6.1 NextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site Scripting 0.9%