Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:social_web_suite:social_media_auto_post_social_media_auto_publish:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Social Web Suite: SQL injection and authentication bypass (CVE-2026-93904)

The Social Web Suite WordPress plugin (up to 4.1.12) is vulnerable to unauthenticated SQL injection via the exclude_posts parameter and an authentication bypass due to insecure default HMAC secret key handling.

Social Media Auto Post, Social Media Auto Publish wordpress sqli authentication-bypass
1t 1c