Fs-Code

9 CVEs across 3 Fs-Code products. Browse Fs-Code vulnerabilities, severities, and proof-of-concept exploits.

Fs-Code products with known CVEs

ProductCVEs
Booknetic4
Fs Poster4
Fs Poster - WordPress Social Media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest]1
Fs-Code CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39746Critical9.32026-10-06Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
CVE-2026-10195High8.82026-09-01The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization…
CVE-2026-25439High8.12026-06-17Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions.
CVE-2025-30960High8.32025-04-16Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8.
CVE-2025-30962High7.12025-04-15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fs-code FS Poster fs-poster allows Reflected XSS.This iss…
CVE-2024-13146High8.82025-03-26The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbi…
CVE-2025-26978High8.52025-03-15Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster…
CVE-2025-26926Medium4.32025-02-25Cross-Site Request Forgery (CSRF) vulnerability in fs-code Booknetic booknetic.This issue affects Booknetic: from n/a through <= 4.0.9.
CVE-2024-37237Medium4.32025-01-02Cross-Site Request Forgery (CSRF) vulnerability in fs-code FS Poster fs-poster allows Cross Site Request Forgery.This issue affects FS Poster: from n/a through…