CVE-2024-2088

The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3 via the 'nxs_getExpSettings' function. This makes it possible for authenticated attackers, with subscriber access and above, to extract sensitive data including social network API keys and secrets.

The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3 via the 'nxs_getExpSettings' function. This makes it possible for authenticated attackers, with subscriber access and above, to extract sensitive data including social network API keys and secrets.

El complemento NextScripts: Social Networks Auto-Poster para WordPress es vulnerable a la exposición de información confidencial en todas las versiones hasta la 4.4.3 incluida a través de la función 'nxs_getExpSettings'. Esto hace posible que atacantes autenticados, con acceso de suscriptor y superior, extraigan datos confidenciales, incluidas claves y secretos de API de redes sociales.