WP2Social Auto Publish
WP2Social Auto Publish has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WP2Social Auto Publish has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nicolai Hellesnes (nico_). WP2Social Auto Publish is installed on roughly 9,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-12064WP2Social Auto Publish <= 2.4.7 - Reflected Cross-Site Scripting via PostMessage
Read the full analysisVulnerability Records
WP2Social Auto Publish
Author
f1logic
Try it out on your free dummy site: Click here => https://tastewp.com/new/?pre-installed-plugin-slug=facebook-auto-publish A quick look into WP2Social Auto Publish : ★ Publish message to Facebook with image ★ Attach post or share link to Facebook ★ Filter items to be published based on categories ★ Filter items to be published based on custom post types ★ Enable or disable wordpress page publishing ★ Customizable message formats for Facebook WP2Social Auto Publish Features in Detail The WP2Social Auto Publish lets you publish posts automatically from your blog to Facebook. You can publish your posts to Facebook as simple text message, text message with image or as attached link to your blog. The plugin supports filtering posts based on custom post-types as well as categories. The prominent features of the WP2Social Auto Publish plugin are highlighted below. Supported Mechanisms The various mechanisms of posting to Facebook are listed below. Simple text message Text message with image Share a link to your blog post Attach your blog post Post to specific pages on Facebook Filter Settings The plugin offers multiple kinds of filters for contents to be published automatically. Enable or disable publishing of wordpress pages Filter posts to be published based on categories Filtering based on custom post types Message Format Settings The supported post elements which can be published are given below. Post title Post description Post excerpt Permalink Blog title User nicename Post ID Post publish date User display name About WP2Social Auto Publish is developed and maintained by XYZScripts. For any support, you may contact us. ★ WP2Social Auto Publish User Guide ★ WP2Social Auto Publish FAQ More Information ★ WP2Social Auto Publish User Guide ★ WP2Social Auto Publish FAQ Troubleshooting Please read the FAQ first if you are having problems. Requirements WordPress 3.0+ PHP 5.4+ Feedback We would like to receive your feedback and suggestions about WP2Social Auto Publish plugin. You may submit them at our support desk.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C