{"items":[{"id":"CVE-2026-3228","published":"2026-03-10T09:58:59.045Z","updated":"2026-04-08T17:09:22.134Z","title":"NextScripts: Social Networks Auto-Poster <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode","severity":"MEDIUM","score":6.4,"vendor":"nextscripts","product":"NextScripts: Social Networks Auto-Poster","kev":false,"epss":0.04244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27379","published":"2026-03-05T05:53:56.951Z","updated":"2026-04-28T16:15:02.763Z","title":"WordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"NextScripts","product":"NextScripts","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2020-36831","published":"2024-10-16T06:43:28.112Z","updated":"2026-04-08T16:46:16.033Z","title":"NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization","severity":"MEDIUM","score":5,"vendor":"nextscripts","product":"NextScripts: Social Networks Auto-Poster","kev":false,"epss":0.00501,"kevAdded":null,"exploit":false},{"id":"CVE-2024-37275","published":"2024-07-22T08:43:31.809Z","updated":"2026-04-28T16:09:57.933Z","title":"WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NextScripts","product":"NextScripts","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2024-1762","published":"2024-05-22T06:50:34.682Z","updated":"2026-04-08T17:03:33.817Z","title":"NextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent","severity":"MEDIUM","score":6.1,"vendor":"nextscripts","product":"NextScripts: Social Networks Auto-Poster","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2024-2088","published":"2024-05-22T06:50:34.168Z","updated":"2026-04-08T17:00:21.956Z","title":"NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure","severity":"HIGH","score":8.5,"vendor":"nextscripts","product":"NextScripts: Social Networks Auto-Poster","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2024-1446","published":"2024-05-22T06:50:33.049Z","updated":"2026-04-08T16:44:49.026Z","title":"NextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletion","severity":"MEDIUM","score":5.4,"vendor":"nextscripts","product":"NextScripts: Social Networks Auto-Poster","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49183","published":"2023-12-15T14:54:38.275Z","updated":"2026-04-28T16:08:56.354Z","title":"WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"NextScripts","product":"NextScripts: Social Networks Auto-Poster","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2021-38356","published":"2021-11-01T21:01:08.103Z","updated":"2025-03-31T17:46:39.437Z","title":"NextScripts: Social Networks Auto-Poster <= 4.3.20 Reflected Cross-Site Scripting","severity":"MEDIUM","score":6.1,"vendor":"NextScripts","product":"NextScripts: Social Networks Auto-Poster","kev":false,"epss":0.00873,"kevAdded":null,"exploit":false}]}