Social Media Auto Publish

Social Media Auto Publish has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Social Media Auto Publish has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nicolai Hellesnes (nico_). Social Media Auto Publish is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Social Media Auto Publish vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-12076

Social Media Auto Publish <= 3.6.5 - Reflected Cross-Site Scripting via PostMessage

Read the full analysis

Vulnerability Records

1 records
Social Media Auto Publish banner
Latestv3.6.10

Social Media Auto Publish

f1logic

Author

f1logic

4.7(345)
94/100
Last Updated
2026-06-25 (3mo ago)
Active Installs
6,000+
Downloads
661,192
Requires WP
3.0+
Requires PHP
8.2+
Tested up to
WP 7.0.4
Created
2013-04-16 (14y ago)

Try it out on your free dummy site: Click here => https://tastewp.com/new/?pre-installed-plugin-slug=social-media-auto-publish A quick look into Social Media Auto Publish : ★ Publish message to Facebook with image ★ Attach post or share link to Facebook ★ Publish to Twitter with image ★ Publish to LinkedIn with image ★ Publish to Instagram with image ★ Publish to Tumblr with image ★ Publish to Telegram with image ★ Publish to Threads with image ★ Attach post to LinkedIn ★ Attach post to Tumblr ★ Filter items to be published based on categories ★ Filter items to be published based on custom post types ★ Enable or disable wordpress page publishing ★ Customizable message formats for Twitter, LinkedIn, Instagram, Tumblr, Facebook, Threads and Telegram Social Media Auto Publish Features in Detail The Social Media Auto Publish lets you publish posts automatically from your blog to social media networks like Facebook, Twitter, Instagram, Tumblr, LinkedIn, Threads and Telegram. The plugin supports filtering posts based on custom post-types as well as categories. The prominent features of the social media auto publish plugin are highlighted below. Supported Social Media The various social media supported are listed below. Facebook Twitter LinkedIn Instagram Tumblr Telegram Threads Filter Settings The plugin offers multiple kinds of filters for contents to be published automatically. Enable or disable publishing of wordpress pages Filter posts to be published based on categories Filtering based on custom post types Message Format Settings Separate message format for Facebook, Twitter, Instagram, Tumblr, LinkedIn, Threads and Telegram Supports post title, description, excerpt, permalink, blog title, nicename, post id and post publish date Posting options Publish message to Facebook with image Attach post to Facebook Share link on Facebook Post to specific pages on Facebook Post to Twitter with image Post to LinkedIn with image Post to Telegram with image Post to Threads with image Post to specific pages on LinkedIn Attach post to LinkedIn Publish message to Instagram with image Publish message to Tumblr with image Share link on Tumblr Share link on Telegram Publish message to Telegram channel,group with image About Social Media Auto Publish is developed and maintained by XYZScripts. For any support, you may contact us. ★ Social Media Auto Publish User Guide ★ Social Media Auto Publish FAQ More Information ★ Social Media Auto Publish User Guide ★ Social Media Auto Publish FAQ Troubleshooting Please read the FAQ first if you are having problems. Requirements WordPress 3.0+ PHP 8.2+ Feedback We would like to receive your feedback and suggestions about Social Media Auto Publish plugin. You may submit them at our support desk.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C