Approved changes feed: RSS · Atom

cpe:2.3:a:evergreencontentposter:evergreen_content_poster:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorEvergreencontentposter (759662ac-7d42-5b57-9c99-700ddeacd41a)
ProductEvergreen Content Poster (f408029e-5aa8-59d6-8d46-f62378010a57)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32824 vulnerable 2026-06-08 06:37:24.093190 WordPress Evergreen Content Poster plugin <= 1.4.2 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster.This issue affects Evergreen Content Poster: from n/a through <= 1.4.2.
Published: 2024-06-09T12:14:48.227Z
Updated: 2026-04-28T16:09:41.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29099 vulnerable 2026-06-08 06:33:28.734334 WordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1.
Published: 2024-03-19T15:56:14.464Z
Updated: 2026-04-28T16:09:16.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12071 vulnerable 2026-06-08 06:23:51.114287 Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
MEDIUM (5.3)
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to delete arbitrary posts and pages.
Published: 2025-01-18T03:21:12.989Z
Updated: 2026-04-08T17:14:15.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41127 vulnerable 2026-06-08 06:11:05.373871 WordPress Evergreen Content Poster Plugin <= 1.3.6.1 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media allows Stored XSS.This issue affects Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media: from n/a through 1.3.6.1.
Published: 2023-11-30T12:19:01.852Z
Updated: 2026-04-28T16:08:37.284Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.