Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Insufficient Privilege Validation in NextScripts: Social Networks Auto-Poster (blog.sucuri.net)

by WPNEWS admin September 6, 2020, 17:29

NextScripts: Social Networks Auto-Poster is a plugin that automatically publishes posts from your blog to your Social Media accounts such as Facebook, Twitter, Google+, Blogger, Tumblr, Flickr, LinkedIn, Instagram, Telegram, YouTube, WordPress, etc.

During a routine research audit for our Sucuri Firewall, we discovered a post deletion, arbitrary posting in social networks, and arbitrary plugin settings update affecting over 100,000 users of the WordPress plugin.

insufficient privilege NextScripts: Social Networks Auto-Poster security validation vulnerability

More From: Security

Wordfence Launches Bug Bounty Program to Fund WordPress Security Research and Showcase Researchers (www.wordfence.com)
At Defiant Inc and Wordfence, our mission is to Secure the Web. A critical component of creating and maintaining a secure online community is the research that reveals vulnerabilities in[…]
4 Million WordPress Sites affected by Stored Cross-Site Scripting Vulnerability in LiteSpeed Cache Plugin (www.wordfence.com)
On August 14, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting (XSS) vulnerability in LiteSpeed Cache plugin, which is actively[…]
How to Find & Fix Japanese SEO Spam (blog.sucuri.net)
Japanese SEO Spam, also known as “Japanese keyword hack” or “Japanese SEO poisoning,” is a spammy search engine optimization technique used by black hat SEO artists to make a website[…]
The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites (patchstack.com)
The WordPress ecosystem is getting better with addressing security issues, but there is one big bottleneck – unreachable plugin developers.
2023 WordPress Security Survey – What we have learned (melapress.com)
Melapress presents the results and findings of its WordPress Security Survey 2023 edition held online, and in-person at WCEU.
All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0 (wptavern.com)
All-In-One Security (AIOS), a plugin active on more than a million WordPress sites, was found to be logging plaintext passwords from login attempts in the database and has patched the[…]

Loginizer Plugin Gets Forced Security Update for Vulnerabilities Affecting 1 Million Users (wptavern.com)

Wordfence Launches Bug Bounty Program to Fund WordPress Security Research and Showcase Researchers (www.wordfence.com)

4 Million WordPress Sites affected by Stored Cross-Site Scripting Vulnerability in LiteSpeed Cache Plugin (www.wordfence.com)

How to Find & Fix Japanese SEO Spam (blog.sucuri.net)

The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites (patchstack.com)

2023 WordPress Security Survey – What we have learned (melapress.com)

All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0 (wptavern.com)

Critical Vulnerability in File Manager Plugin Affecting 700k WordPress Websites (blog.sucuri.net)

High-Severity Vulnerability Patched in Advanced Access Manager (www.wordfence.com)

Leave a ReplyCancel reply

Log In

Sign In

Forgot password?

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections