plugin

Evergreen Content Poster Vulnerabilities

12 known security issues reported for the Evergreen Content Poster WordPress plugin. Most recent disclosed Oct 29, 2025.

6 medium

Running Evergreen Content Poster on your site? Check whether your installed version is affected.

Scan your site free

Evergreen Content Poster &#8211; Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] <= 1.4.5 (unfixed)

unknown

[en] Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5.

Affected:
up to 1.4.5
Fix:
No patched version reported
Disclosed:
Oct 29, 2025

CVE-2025-64234 on NVD →

Evergreen Content Poster &#8211; Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] <= 1.4.5 (unfixed)

unknown

[en] Cross-Site Request Forgery (CSRF) vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Cross Site Request Forgery.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5.

Affected:
up to 1.4.5
Fix:
No patched version reported
Disclosed:
Oct 22, 2025

CVE-2025-49373 on NVD →

Evergreen Content Poster <= 1.4.5 - Cross-Site Request Forgery

medium

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers t...

CVSS:
4.3
Affected:
up to 1.4.5
Fixed in:
1.4.6
Disclosed:
Jul 12, 2025

CVE-2025-49373 on NVD →

Evergreen Content Poster <= 1.4.5 - Missing Authorization

medium

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with Subscriber-level access...

CVSS:
4.3
Affected:
up to 1.4.5
Fixed in:
1.4.6
Disclosed:
Apr 22, 2025

CVE-2025-64234 on NVD →

Evergreen Content Poster &#8211; Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.5

unknown

[en] The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated att...

Affected:
up to 1.4.5
Fixed in:
1.4.5
Disclosed:
Jan 18, 2025

CVE-2024-12071 on NVD →

Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

medium

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attacker...

CVSS:
5.3
Affected:
up to 1.4.4
Fixed in:
1.4.5
Disclosed:
Jan 17, 2025

CVE-2024-12071 on NVD →

Evergreen Content Poster &#8211; Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.3

unknown

[en] Missing Authorization vulnerability in Evergreen Content Poster.This issue affects Evergreen Content Poster: from n/a through 1.4.2.

Affected:
up to 1.4.3
Fixed in:
1.4.3
Disclosed:
Jun 9, 2024

CVE-2024-32824 on NVD →

Evergreen Content Poster <= 1.4.2 - Missing Authorization

medium

The Evergreen Content Poster plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_network_post() function in versions up to, and including, 1.4.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create net...

CVSS:
4.3
Affected:
up to 1.4.2
Fixed in:
1.4.3
Disclosed:
Apr 22, 2024

CVE-2024-32824 on NVD →

Evergreen Content Poster &#8211; Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.2

unknown

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1.

Affected:
up to 1.4.2
Fixed in:
1.4.2
Disclosed:
Mar 19, 2024

CVE-2024-29099 on NVD →

Evergreen Content Poster <= 1.4.1 - Reflected Cross-Site Scripting

medium

The Evergreen Content Poster plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can suc...

CVSS:
6.1
Affected:
up to 1.4.1
Fixed in:
1.4.2
Disclosed:
Mar 15, 2024

CVE-2024-29099 on NVD →

Evergreen Content Poster &#8211; Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster] < 1.4.1

unknown

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media allows Stored XSS.This issue affects Evergreen Content Poster – Auto Post and Schedule Your Best Content...

Affected:
up to 1.4.1
Fixed in:
1.4.1
Disclosed:
Nov 30, 2023

CVE-2023-41127 on NVD →

Evergreen Content Poster <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

medium

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta...

CVSS:
4.4
Affected:
up to 1.4
Fixed in:
1.4.1
Disclosed:
Nov 27, 2023

CVE-2023-41127 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database