F1logic
10 CVEs across 9 F1logic products. Browse F1logic vulnerabilities, severities, and proof-of-concept exploits.
F1logic products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12077 | Medium | 6.1 | 2025-12-13 | The WP to LinkedIn Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.9… |
CVE-2025-12076 | Medium | 6.1 | 2025-12-13 | The Social Media Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage parameter in all versions up to, and includi… |
CVE-2025-12079 | Medium | 6.1 | 2025-11-18 | The WP Twitter Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.7.4 du… |
CVE-2025-12064 | Medium | 6.1 | 2025-11-08 | The WP2Social Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 2.4.7 due… |
CVE-2025-64356 | Medium | 4.3 | 2025-10-31 | Missing Authorization vulnerability in f1logic Insert PHP Code Snippet insert-php-code-snippet allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-12873 | Medium | 6.1 | 2025-05-15 | The Custom Field Manager WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cr… |
CVE-2024-7420 | Medium | 5.8 | 2024-08-15 | The Insert PHP Code Snippet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6. This is due to missin… |
CVE-2024-2295 | Medium | 6.4 | 2024-06-01 | The Contact Form Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [xyz-cfm-form] shortcode in all versions up to, and… |
CVE-2024-0658 | Medium | 4.4 | 2024-02-29 | The Insert PHP Code Snippet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user's name when accessing the insert-php-code-snippet-ma… |
CVE-2020-36727 | Critical | 9.8 | 2023-06-07 | The Newsletter Manager plugin for WordPress is vulnerable to insecure deserialization in versions up to, and including, 1.5.1. This is due to unsanitized input… |