Security Advisory

CVE-2024-8352

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-03 03:32:00
Last updated 2026-04-08 17:01:57
Assigner Wordfence
CVSS score 7.5
State PUBLISHED

Description

The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.