Is Evergreen Content Poster safe?

Every recorded flaw

• Oct 29, 2025Evergreen Content Poster: Missing AuthorizationCVE-2025-64234 · affects up to 1.4.5 · reported by PatchstackMedium 4.3
• Oct 22, 2025Evergreen Content Poster: Cross-Site Request Forgery (CSRF)CVE-2025-49373 · affects up to 1.4.5 · reported by PatchstackMedium 4.3
• Jan 17, 2025Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media: Unauthorized loss of dataCVE-2024-12071 · affects up to 1.4.4 · reported by WordfenceMedium 5.3
• Jun 9, 2024Evergreen Content Poster: Missing AuthorizationCVE-2024-32824 · affects up to 1.4.2 · reported by PatchstackMedium 5.4
• Mar 19, 2024Evergreen Content Poster: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-29099 · affects up to 1.4.1 · reported by PatchstackHigh 7.1
• Nov 30, 2023Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2023-41127 · affects up to 1.3.6.1 · reported by PatchstackMedium 5.9

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.