F1logic vulnerabilities

Products

• Insert Php Code Snippet 3
• Wp2social Auto Publish 2

Newest

• f1logic wp2social auto publish WP2Social Auto Publish <= 2.4.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter CVE-2026-12042 4.4 MediumSeptember 19, 2026
• f1logic wp to linkedin auto publish WP to LinkedIn Auto Publish <= 1.9.8 - Reflected Cross-Site Scripting via PostMessage CVE-2025-12077 6.1 MediumDecember 13, 2025
• f1logic social media auto publish Social Media Auto Publish <= 3.6.5 - Reflected Cross-Site Scripting via PostMessage CVE-2025-12076 6.1 MediumDecember 13, 2025
• f1logic wp twitter auto publish WP Twitter Auto Publish <= 1.7.4 - Reflected Cross-Site Scripting via PostMessage CVE-2025-12079 6.1 MediumNovember 18, 2025
• f1logic wp2social auto publish WP2Social Auto Publish <= 2.4.7 - Reflected Cross-Site Scripting via PostMessage CVE-2025-12064 6.1 MediumNovember 8, 2025
• f1logic insert php code snippet WordPress Insert PHP Code Snippet plugin <= 1.4.3 - Broken Access Control vulnerability CVE-2025-64356 4.3 MediumOctober 31, 2025
• f1logic custom field manager Custom Field Manager <= 1.0 - Reflected XSS Vulnerability CVE-2024-12873 6.1 MediumMay 15, 2025
• f1logic insert php code snippet Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion CVE-2024-7420 5.8 MediumAugust 15, 2024
• f1logic contact form manager Contact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2295 6.4 MediumJune 1, 2024
• f1logic insert php code snippet Insert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-0658 4.4 MediumFebruary 20, 2024
• f1logic newsletter manager Newsletter Manager <= 1.5.1 - Insecure Deserialization CVE-2020-36727 9.8 CriticalJune 7, 2023