CVE-2026-16570

Name of the Vulnerable Software and Affected Versions NextScripts: Social Networks Auto-Poster WordPress plugin versions prior to 4.4.8

Description Reflected Cross-Site Scripting (XSS) occurs when an application includes untrusted data in a web page without proper validation or escaping. The plugin fails to escape certain query-string parameters reflected on an admin page, which allows attackers to execute malicious scripts in the browser of logged-in users, such as administrators, if they are tricked into clicking a crafted link.

Recommendations Update NextScripts: Social Networks Auto-Poster WordPress plugin to version 4.4.8 or later.