Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] <= 1.4.5 (unfixed)
unknown
[en] Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5.
- Affected:
- up to 1.4.5
- Fix:
- No patched version reported
- Disclosed:
- Oct 29, 2025
CVE-2025-64234 on NVD →
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] <= 1.4.5 (unfixed)
unknown
[en] Cross-Site Request Forgery (CSRF) vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Cross Site Request Forgery.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5.
- Affected:
- up to 1.4.5
- Fix:
- No patched version reported
- Disclosed:
- Oct 22, 2025
CVE-2025-49373 on NVD →
Evergreen Content Poster <= 1.4.5 - Cross-Site Request Forgery
medium
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers t...
- CVSS:
- 4.3
- Affected:
- up to 1.4.5
- Fixed in:
- 1.4.6
- Disclosed:
- Jul 12, 2025
CVE-2025-49373 on NVD →
Evergreen Content Poster <= 1.4.5 - Missing Authorization
medium
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with Subscriber-level access...
- CVSS:
- 4.3
- Affected:
- up to 1.4.5
- Fixed in:
- 1.4.6
- Disclosed:
- Apr 22, 2025
CVE-2025-64234 on NVD →
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.5
unknown
[en] The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated att...
- Affected:
- up to 1.4.5
- Fixed in:
- 1.4.5
- Disclosed:
- Jan 18, 2025
CVE-2024-12071 on NVD →
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
medium
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attacker...
- CVSS:
- 5.3
- Affected:
- up to 1.4.4
- Fixed in:
- 1.4.5
- Disclosed:
- Jan 17, 2025
CVE-2024-12071 on NVD →
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.3
unknown
[en] Missing Authorization vulnerability in Evergreen Content Poster.This issue affects Evergreen Content Poster: from n/a through 1.4.2.
- Affected:
- up to 1.4.3
- Fixed in:
- 1.4.3
- Disclosed:
- Jun 9, 2024
CVE-2024-32824 on NVD →
Evergreen Content Poster <= 1.4.2 - Missing Authorization
medium
The Evergreen Content Poster plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_network_post() function in versions up to, and including, 1.4.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create net...
- CVSS:
- 4.3
- Affected:
- up to 1.4.2
- Fixed in:
- 1.4.3
- Disclosed:
- Apr 22, 2024
CVE-2024-32824 on NVD →
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.2
unknown
[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1.
- Affected:
- up to 1.4.2
- Fixed in:
- 1.4.2
- Disclosed:
- Mar 19, 2024
CVE-2024-29099 on NVD →
Evergreen Content Poster <= 1.4.1 - Reflected Cross-Site Scripting
medium
The Evergreen Content Poster plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can suc...
- CVSS:
- 6.1
- Affected:
- up to 1.4.1
- Fixed in:
- 1.4.2
- Disclosed:
- Mar 15, 2024
CVE-2024-29099 on NVD →
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.1
unknown
[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media allows Stored XSS.This issue affects Evergreen Content Poster – Auto Post and Schedule Your Best Content...
- Affected:
- up to 1.4.1
- Fixed in:
- 1.4.1
- Disclosed:
- Nov 30, 2023
CVE-2023-41127 on NVD →
Evergreen Content Poster <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta...
- CVSS:
- 4.4
- Affected:
- up to 1.4
- Fixed in:
- 1.4.1
- Disclosed:
- Nov 27, 2023
CVE-2023-41127 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database