CVE-2024-2088: NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3 via the 'nxsgetExpSettings' function. This makes it possible for authenticated attackers, with subscriber access and above, to extract sensitive data including social network API keys and secrets.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2088?
CVE-2024-2088 has a high severity rating due to sensitive information exposure risks for authenticated users.
How do I fix CVE-2024-2088?
To fix CVE-2024-2088, update the NextScripts: Social Networks Auto-Poster plugin to version 4.4.4 or later.
Who is affected by CVE-2024-2088?
CVE-2024-2088 affects users of the NextScripts: Social Networks Auto-Poster plugin up to version 4.4.3.
What type of vulnerability is CVE-2024-2088?
CVE-2024-2088 is classified as a Sensitive Information Exposure vulnerability.
What functions are involved in the CVE-2024-2088 vulnerability?
The vulnerability in CVE-2024-2088 is tied to the 'nxs_getExpSettings' function.