Sensitive Information Exposure Vulnerability Affects NextScripts Social Networks Auto-Poster Plugin for WordPress

CVE-2024-2088

What is CVE-2024-2088?

The NextScripts Social Networks Auto-Poster plugin for WordPress has a vulnerability that enables authenticated attackers, with subscriber privileges and higher, to exploit the 'nxs_getExpSettings' function. This flaw permits unauthorized access to sensitive data, including social network API keys and secrets, potentially compromising user accounts and associated social media integrations. Users are advised to update their plugins to the latest version to mitigate potential security risks.

References