Auto Post After Image Upload

Auto Post After Image Upload has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Auto Post After Image Upload has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Kévin Mosbahi (Mika). Auto Post After Image Upload is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.4.21.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Auto Post After Image Upload vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-31611

Auto Post After Image Upload <= 1.6 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Auto Post After Image Upload banner
Latestv1.6

Auto Post After Image Upload

Shaharia Azam

Author

Shaharia Azam

4.3(12)
86/100
Last Updated
2020-05-29 (6y ago)
Active Installs
100+
Downloads
14,360
Requires WP
4.0+
Requires PHP
5.6+
Tested up to
WP 5.4.21
Created
2013-08-31 (13y ago)

This Auto Post After Image Upload plugin will let you create single/bulk post after uploading any media from wordpress media gallery. This is very much essential plugin for photo blog or where there are a lots number of image posting in a wordpress driven site. When you will upload an image from wordpress media gallery then a post will be created automatically with that image as featured image. Website of Author: http://www.shahariaazam.com Submit Issues: https://github.com/shahariaazam/auto-post-after-image-upload/issues/new Project GitHub URL: https://github.com/shahariaazam/auto-post-after-image-upload For more details you can send mail with your suggestions, recommendation to shaharia.azam@gmail.com

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C