CVE-2024-2088: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3…

PriorityP336medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

EPSS

0.34%

26.3th percentile

The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3 via the 'nxs_getExpSettings' function. This makes it possible for authenticated attackers, with subscriber access and above, to extract sensitive data including social network API keys and secrets.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nextscripts	nextscripts_social_networks_auto-poster	<= 4.4.3	—
nextscripts	social_networks_auto_poster	< 4.4.4	4.4.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.