NextScripts
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| NextScripts: Social Networks Auto-Poster | 7 | – | Mar 10, 2026 |
| NextScripts | 2 | – | Mar 5, 2026 |
Exploited and recent CVEs
- CVE-2026-3228 NextScripts: Social Networks Auto-Poster <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode 4.2%
- CVE-2026-27379 WordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerability 0.4%
- CVE-2020-36831 NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization 0.5%
- CVE-2024-37275 WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-1762 NextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent 0.4%
- CVE-2024-2088 NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure 0.3%
- CVE-2024-1446 NextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletion 0.2%
- CVE-2023-49183 WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2021-38356 NextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site Scripting 0.9%