Wp To Hootsuite Vulnerabilities

The Post to Social Media – WordPress to Hootsuite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.9. This is due to missing or incorrect nonce validation on the run_log_table_bulk_actions() function. This makes it possible for unauthenticated attackers to clear...

CVSS:

4.3

Affected:

up to 1.5.9

Fixed in:

1.6.0

Disclosed:

Apr 4, 2025

CVE-2025-32267 on NVD →

The WordPress to Hootsuite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrative level permissions and above to in...

CVSS:

5.5

Affected:

up to 1.4.5

Fixed in:

1.4.6

Disclosed:

Aug 5, 2022