f1logic vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20255
4. 20261

Newest CVEs

• CVE-2026-12042

  WP2Social Auto Publish <= 2.4.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter

  f1logic · WP2Social Auto Publish

  Medium4.4
• CVE-2025-12077

  WP to LinkedIn Auto Publish <= 1.9.8 - Reflected Cross-Site Scripting via PostMessage

  f1logic · WP to LinkedIn Auto Publish

  Medium6.1
• CVE-2025-12076

  Social Media Auto Publish <= 3.6.5 - Reflected Cross-Site Scripting via PostMessage

  f1logic · Social Media Auto Publish

  Medium6.1
• CVE-2025-12079

  WP Twitter Auto Publish <= 1.7.4 - Reflected Cross-Site Scripting via PostMessage

  f1logic · WP Twitter Auto Publish

  Medium6.1
• CVE-2025-12064

  WP2Social Auto Publish <= 2.4.7 - Reflected Cross-Site Scripting via PostMessage

  f1logic · WP2Social Auto Publish

  Medium6.1
• CVE-2025-64356

  WordPress Insert PHP Code Snippet plugin <= 1.4.3 - Broken Access Control vulnerability

  f1logic · Insert PHP Code Snippet

  Medium4.3
• CVE-2024-7420

  Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion

  f1logic · Insert PHP Code Snippet

  Medium5.8
• CVE-2024-2295

  Contact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  f1logic · Contact Form Manager

  Medium6.4
• CVE-2024-0658

  Insert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting

  f1logic · Insert PHP Code Snippet

  Medium4.4
• CVE-2020-36727

  Newsletter Manager <= 1.5.1 - Insecure Deserialization

  f1logic · Newsletter Manager

  Critical9.8