CVE-2024-6750: The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple…

PriorityP344high7.5CVSS 3.1

AVNACLPRNUINSUCNIHAN

EPSS

0.29%

20.2th percentile

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.3.14. This makes it possible for unauthenticated attackers to add, modify, or delete post meta and plugin options.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
wpweb	social_auto_poster	<= 5.3.14	—
wpwebinfotech	social_auto_poster	< 5.3.15	5.3.15

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.