NextScripts: Social Networks Auto-Poster, CVE-2024-2088

CVE, Research URL: CVE-2024-2088
Home page URL: Security reports for NextScripts: Social Networks Auto-Poster
Application: NextScripts: Social Networks Auto-Poster
Published on: May 22, 2024
Research Description: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3 via the 'nxs_getExpSettings' function. This makes it possible for authenticated attackers, with subscriber access and above, to extract sensitive data including social network API keys and secrets.
Affected versions: max 4.4.4.
Status: vulnerable