cleantalk

Vulnerabilities and Security Researches

Vulnerabilities and security researches for evergreen-content-poster

Direction: ascending

Jun 07, 2024

Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media # CVE-2024-29099

CVE, Research URL

CVE-2024-29099

Date
Mar 19, 2024
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1.
Affected versions
Min -, max -.
Status
vulnerable

Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media # CVE-2023-41127

CVE, Research URL

CVE-2023-41127

Date
Nov 30, 2023
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media allows Stored XSS.This issue affects Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media: from n/a through 1.3.6.1.
Affected versions
Min -, max -.
Status
vulnerable

Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media # CVE-2024-32824

CVE, Research URL

CVE-2024-32824

Date
Jun 09, 2024
Research Description
Missing Authorization vulnerability in Evergreen Content Poster.This issue affects Evergreen Content Poster: from n/a through 1.4.2.
Affected versions
Min -, max -.
Status
vulnerable

Jan 19, 2025

Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media # CVE-2024-12071

CVE, Research URL

CVE-2024-12071

Date
Jan 18, 2025
Research Description
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to delete arbitrary posts and pages.
Affected versions
Min -, max -.
Status
vulnerable