CVE-2024-1446

The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.4.3. This is due to missing or incorrect nonce validation on the nxssnap-reposter page. This makes it possible for unauthenticated attackers to delete arbitrary posts or pages via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3084635%40social-networks-auto-poster-facebook-twitter-g%2Ftrunk&old=3004433%40social-networks-auto-poster-facebook-twitter-g%2Ftrunk&sfp_email=&sfph_mail=#file17Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/306b23ee-7dcb-4281-a218-21168998c4b9?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3084635%40social-networks-auto-poster-facebook-twitter-g%2Ftrunk&old=3004433%40social-networks-auto-poster-facebook-twitter-g%2Ftrunk&sfp_email=&sfph_mail=#file17Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/306b23ee-7dcb-4281-a218-21168998c4b9?source=cveThird Party Advisory

Published

May 22, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1440An open redirection vulnerability exists in multiple WSO2 pr…6.1
• CVE-2024-1441An off-by-one error flaw was found in the udevListInterfaces…5.5
• CVE-2024-1442 A user with the permissions to create a data source can use…8.8
• CVE-2024-1443MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Se…4.4
• CVE-2024-1444Rejected reason: Erroneous assignment
• CVE-2024-1445The Page scroll to id plugin for WordPress is vulnerable to …5.4
• CVE-2024-1447The Sydney Toolbox plugin for WordPress is vulnerable to Sto…5.4
• CVE-2024-1448The Social Sharing Plugin – Sassy Social Share plugin for Wo…6.4
• CVE-2024-1449The Master Slider – Responsive Touch Slider plugin for WordP…5.4
• CVE-2024-1450The Shariff Wrapper plugin for WordPress is vulnerable to St…5.4
• CVE-2024-1451An issue has been discovered in GitLab CE/EE affecting all v…8.7
• CVE-2024-1452The GenerateBlocks plugin for WordPress is vulnerable to Sen…4.3