plugin
11 known security issues reported for the Tweet Old Post WordPress plugin. Most recent disclosed Oct 27, 2025.
Running Tweet Old Post on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in Codeinwp Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through <= 9.3.3.
The Revive Old Posts plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 9.3.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.
Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated attackers to update options values that allow ThemeIsle to track...
[en] The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
The Revive Old Posts plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 9.0.10 via deserialization of untrusted input in the vulnerable function 'is_set_not_empty'. This allows administrator-level attackers to inject a PHP Object. No POP chain is present in the vulnerable plugi...
Because of this vulnerability, the attackers can have an administrator account on the target's website. Upgrade the plugin.
The Revive Old Posts – Social Media Auto Post and Scheduling Plugin for WordPress is vulnerable to Authorization Bypass due to a missing capability check on the update_response AJAX action in versions before 8.0.0. This makes it possible for unauthenticated attackers to create a new account with administrative-level pr...
The Revive Old Posts – Social Media Auto Post and Scheduling Plugin for WordPress is vulnerable to Authorization Bypass due to a missing capability check on the update_response AJAX action in versions before 8.0.0. This makes it possible for unauthenticated attackers to create a new account with administrative-level pr...
Tweet Old Post plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Upgrade the plugin.
Leveraging a publicly accessible AJAX function named ‘update_response’, it is possible to update any option with the WordPress installation. Using this vulnerability, it is possible to gain administrative access to the WordPress installation by updating the options ‘default_role’ and ‘user...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free