Security
فارسی
All products

blog2social

WordPress · Plugin
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information ExposureCVE-2026-108092 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX HandlersCVE-2026-92829 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Insecure Direct Object ReferenceCVE-2026-89031 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Missing AuthorizationCVE-2026-89030 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Authenticated (Subscriber+) Username EnumerationCVE-2026-89029 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.9.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-56044 blog2social WordPress High Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' ParameterCVE-2026-7051 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' ParameterCVE-2026-4330 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_urlCVE-2025-12560 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX ActionCVE-2026-4331 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post ModificationCVE-2026-1942 blog2social WordPress Medium Fix reported
Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post TrashingCVE-2025-13558 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information ExposureCVE-2025-14943 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File UploadCVE-2025-12563 blog2social WordPress Medium Fix reported
Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` ParameterCVE-2025-5673 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 8.3.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-4133 blog2social WordPress Medium Fix reported
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings UpdateCVE-2022-3622 blog2social WordPress Medium Fix reported
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2022-3247 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File UploadCVE-2024-7302 blog2social WordPress Medium Fix reported
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL InjectionCVE-2024-3549 blog2social WordPress Critical Fix reported