Medium severity6.5NVD Advisory· Published Jul 24, 2024· Updated Jun 17, 2026

CVE-2024-6755

Description

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the ‘wpw_auto_poster_quick_delete_multiple’ function in all versions up to, and including, 5.3.14. This makes it possible for unauthenticated attackers to delete arbitrary posts.

Affected products

WordPress/Social Auto Posterllm-fuzzy
Range: <=5.3.14
WPWeb/Social Auto Posterv5
Range: 0

Patches

Vulnerability mechanics

References

www.wordfence.com/threat-intel/vulnerabilities/id/d9b1044d-6858-498f-9b89-352650061858nvdThird Party Advisory
codecanyon.net/item/social-auto-poster-wordpress-scheduler-marketing-plugin/5754169nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000