cleantalk
Vulnerabilities and Security Researches

WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule, CVE-2025-58846

CVE, Research URL

CVE-2025-58846

Published on
Sep 05, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule allows Reflected XSS. This issue affects WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule: from n/a through 2020.1.0.
Affected versions
Min -, max 2020.1.0.
Status
vulnerable