High 7.1 Unfixed Closed
2025-09-05≤ 2020.1.0
CVE-2025-58846
CVE-2025-58846
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule Plugin <= 2020.1.0 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress "WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule" plugin <= 2020.1.0 - Sensitive Information Disclosure vulnerability
WordPress "WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule" plugin <= 2020.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability