f1logic
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Insert PHP Code Snippet | 3 | – | Oct 31, 2025 |
| WP2Social Auto Publish | 2 | – | Sep 19, 2026 |
| Contact Form Manager | 1 | – | Jun 1, 2024 |
| WP to LinkedIn Auto Publish | 1 | – | Dec 13, 2025 |
| WP Twitter Auto Publish | 1 | – | Nov 18, 2025 |
| Social Media Auto Publish | 1 | – | Dec 13, 2025 |
| Newsletter Manager | 1 | – | Jun 7, 2023 |
Exploited and recent CVEs
- CVE-2026-12042 WP2Social Auto Publish <= 2.4.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter 0.3%
- CVE-2025-12077 WP to LinkedIn Auto Publish <= 1.9.8 - Reflected Cross-Site Scripting via PostMessage 0.2%
- CVE-2025-12076 Social Media Auto Publish <= 3.6.5 - Reflected Cross-Site Scripting via PostMessage 0.2%
- CVE-2025-12079 WP Twitter Auto Publish <= 1.7.4 - Reflected Cross-Site Scripting via PostMessage 0.3%
- CVE-2025-12064 WP2Social Auto Publish <= 2.4.7 - Reflected Cross-Site Scripting via PostMessage 0.2%
- CVE-2025-64356 WordPress Insert PHP Code Snippet plugin <= 1.4.3 - Broken Access Control vulnerability 0.2%
- CVE-2024-7420 Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion 0.2%
- CVE-2024-2295 Contact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-0658 Insert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%
- CVE-2020-36727 Newsletter Manager <= 1.5.1 - Insecure Deserialization 1.6%