CVE-2024-8352: Hypestudio Social Web Suite

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

Affected products

• Hypestudio Social Web Suite: before 4.1.12 (fixed in 4.1.12)

Published 2024-10-03. Last modified 2026-06-17.