CVE-2021-25072

Name of the Vulnerable Software and Affected Versions The NextScripts: Social Networks Auto-Poster WordPress plugin versions prior to 4.3.25

Description The issue allows an attacker to make a logged-in admin delete arbitrary posts via a CSRF attack because there is no CSRF check in place when deleting items.

Recommendations For versions prior to 4.3.25, update to version 4.3.25 or later to resolve the issue. As a temporary workaround, consider restricting access to the delete function to minimize the risk of exploitation.