plugin
12 known security issues reported for the Wp Fb Autoconnect WordPress plugin. Most recent disclosed Jun 20, 2025.
Running Wp Fb Autoconnect on your site? Check whether your installed version is affected.
Scan your site free[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in justin_k WP-FB-AutoConnect allows Stored XSS. This issue affects WP-FB-AutoConnect: from n/a through 4.6.3.
The WP-FB-AutoConnect plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pa...
[en] The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request grant...
The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted th...
[en] Cross-Site Request Forgery (CSRF) vulnerability in Justin Klein WP Social AutoConnect plugin <= 4.6.1 versions.
The WP-FB-AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.6.1. This is due to missing or incorrect nonce validation on the jfb_admin_page function. This makes it possible for unauthenticated attackers to update plugin settings (Facebook options) via a for...
The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.6.1. This is due to missing or incorrect nonce validation on the 'jfb_admin_page' function. This makes it possible for unauthenticated attackers to update or reset the plugin's settings via a f...
The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.6.1. This is due to missing or incorrect nonce validation on the 'jfb_admin_page' function. This makes it possible for unauthenticated attackers to update or reset the plugin's settings via a f...
The WP-FB-AutoConnect plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'jfb_email_to', 'jfb_stream_content', 'jfb_api_key' and 'jfb_api_sec' variables in versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated a...
This plugin is prone to a cross site request forgery and cross site scripting. Attackers can perform XSS attacks and change the plugins admin settings by tricking a logged in admin to visit a crafted page. Upgrade this plugin.
The WP-FB-AutoConnect plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'jfb_email_to', 'jfb_stream_content', 'jfb_api_key' and 'jfb_api_sec' variables in versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated a...
The WP Social AutoConnect WordPress plugin was affected by a XSS/CSRF security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free