WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in NextScripts: Social Networks Auto-Poster

Automatically publishes blogposts to profiles/pages/groups on Twitter, Google+, Pinterest, LinkedIn, Blogger, Tumblr ... 22 more

16Reported vulnerabilities
7.5Highest CVSS score
4.4.8Latest version
20,000+Active installs

What to do now

Update NextScripts: Social Networks Auto-Poster to 4.4.8 or later. 16 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2021-25072 Medium 6.5 0.5% Before 4.3.25 4.3.25 February 1, 2022
CVE-2021-24975 Medium 6.1 1.3% Before 4.3.24 4.3.24 February 1, 2022
CVE-2019-9911 Medium 6.1 1.3% Before 4.2.8 4.2.8 March 22, 2019
CVE-2021-38356 Medium 6.1 0.9% 4.3.20 and earlier 4.3.21 November 1, 2021
CVE-2026-27379 High 7.5 0.6% 4.4.7 and earlier 4.4.8 February 24, 2026
WF-9d2df49d-0276-403d-9fe8-00fdf7262818 High 7.2 — Before 3.4.18 3.4.18 May 25, 2015
CVE-2020-36831 Medium 6.5 0.5% Before 4.3.18 4.3.18 October 16, 2024
CVE-2026-3228 Medium 6.4 0.3% 0 to 4.4.6 (inclusive) 4.4.7 March 10, 2026
CVE-2024-2088 Medium 6.5 0.3% Before 4.4.4 4.4.4 May 22, 2024
CVE-2026-16570 Medium 6.1 0.3% Before 4.4.8 4.4.8 August 17, 2026
CVE-2024-37275 Medium 6.1 0.3% 4.4.6 and earlier 4.4.8 June 27, 2024
CVE-2024-1762 Medium 6.1 0.4% Before 4.4.4 4.4.4 May 22, 2024
CVE-2023-49183 Medium 6.1 0.4% 4.4.2 and earlier 4.4.3 November 29, 2023
WF-752caefe-7e87-4d4f-89e0-fbd28e4076c4 Medium 6.1 — 4.3.25 and earlier 4.3.26 July 4, 2022
CVE-2026-97227 Medium 4.3 0.2% 4.4.7 and earlier 4.4.8 September 25, 2026
CVE-2024-1446 Medium 4.3 0.2% Before 4.4.4 4.4.4 May 22, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.