Johnh10 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Johnh10 products: 2 record(s), with severity, exploitation and fixes.

Auto Post Scheduler 1 Video Blogster Lite 1

Exploited only (KEV) →

CVE-2026-1877 Medium · 6.1 CWE-79 Mar 31, 2026

Auto Post Scheduler <= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps_options_page

The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84. This is due to missing nonce validation on the 'aps_options_page' function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVE-2025-60132 High · 7.1 CWE-352 Oct 22, 2025

WordPress Video Blogster Lite Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in johnh10 Video Blogster Lite video-blogster-lite allows Stored XSS.This issue affects Video Blogster Lite: from n/a through <= 1.2.