Microblog Poster <= 2.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
medium
The Microblog Poster – Auto Publish on Social Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicio...
- CVSS:
- 4.3
- Affected:
- up to 2.1.6
- Fix:
- No patched version reported
- Disclosed:
- Mar 28, 2025
CVE-2025-31435 on NVD →
Microblog Poster < 1.6.2 - Authenticated Blind SQL Injection
high
The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php account_id parameter.
- CVSS:
- 7.2
- Affected:
- up to 1.6.2
- Fixed in:
- 1.6.2
- Disclosed:
- Jul 22, 2015
CVE-2015-9449 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database