Adenion records

14 published records for vendor adenion.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 14.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-13572No exploit	The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.adenion · blog2social · CWE-89 Pre-auth SQL injection	Critical9.8	—	2.1%	Aug 1, 2019
39Monitor	CVE-2024-3549No exploit	Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injectionadenion · blog2social · CWE-89 SQL injection	Critical9.9	—	0.5%	Jun 11, 2024
35Monitor	CVE-2021-24137No exploit	Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injectionadenion · blog2social · CWE-89 SQL injection	High8.8	—	1.5%	Mar 18, 2021
35Monitor	CVE-2022-3246No exploit	Blog2Social < 6.9.10 - Subscriber+ SQLiadenion · blog2social · CWE-89 SQL injection	High8.8	—	1.1%	Oct 25, 2022
26Monitor	CVE-2022-3247No exploit	Blog2Social < 6.9.10 - Subscriber+ SSRFadenion · blog2social · CWE-918 SSRF	Medium6.5	—	0.7%	Oct 25, 2022
24Monitor	CVE-2021-24956Proof of concept	Blog2Social < 6.8.7 - Reflected Cross-Site Scriptingadenion · blog2social · CWE-79 Pre-auth XSS	Medium6.1	—	1.4%	Dec 21, 2021
24Monitor	CVE-2019-9576No exploit	The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.adenion · blog2social · CWE-79 Pre-auth XSS	Medium6.1	—	1.4%	Mar 5, 2019
24Monitor	CVE-2019-17550No exploit	The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS).adenion · blog2social · CWE-79 pre-auth RCE XSS	Medium6.1	—	1.3%	Nov 13, 2019
24Monitor	CVE-2023-3936Proof of concept	Blog2Social < 7.2.1 - Reflected XSSadenion · blog2social · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Aug 21, 2023
24Monitor	CVE-2023-40554No exploit	WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)adenion · blog2social · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Sep 6, 2023
21Monitor	CVE-2024-3678No exploit	Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposureadenion · blog2social · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.5%	Apr 26, 2024
21Monitor	CVE-2024-7302No exploit	Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Uploadadenion · blog2social · CWE-79 XSS	Medium5.4	—	0.3%	Aug 1, 2024
21Monitor	CVE-2025-4133No exploit	Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSSadenion · blog2social · CWE-79 XSS	Medium5.4	—	0.2%	May 22, 2025
16Monitor	CVE-2022-3622No exploit	Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Updateadenion · blog2social · CWE-862 Broken access control (IDOR)	Medium4.1	—	0.5%	Oct 20, 2023

CVE-2019-13572
40Plan
The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- SQL injection
adenion · blog2socialAug 1, 2019
CVE-2024-3549
39Monitor
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection
CriticalCVSS 9.9No exploitEPSS 0%
- SQL injection
adenion · blog2socialJun 11, 2024
CVE-2021-24137
35Monitor
Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
adenion · blog2socialMar 18, 2021
CVE-2022-3246
35Monitor
Blog2Social < 6.9.10 - Subscriber+ SQLi
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
adenion · blog2socialOct 25, 2022
CVE-2022-3247
26Monitor
Blog2Social < 6.9.10 - Subscriber+ SSRF
MediumCVSS 6.5No exploitEPSS 0%
- SSRF
adenion · blog2socialOct 25, 2022
CVE-2021-24956
24Monitor
Blog2Social < 6.8.7 - Reflected Cross-Site Scripting
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
adenion · blog2socialDec 21, 2021
CVE-2019-9576
24Monitor
The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
adenion · blog2socialMar 5, 2019
CVE-2019-17550
24Monitor
The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS).
MediumCVSS 6.1No exploitEPSS 1%
- pre-auth RCE
- XSS
adenion · blog2socialNov 13, 2019
CVE-2023-3936
24Monitor
Blog2Social < 7.2.1 - Reflected XSS
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
adenion · blog2socialAug 21, 2023
CVE-2023-40554
24Monitor
WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
adenion · blog2socialSep 6, 2023
CVE-2024-3678
21Monitor
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adenion · blog2socialApr 26, 2024
CVE-2024-7302
21Monitor
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
MediumCVSS 5.4No exploitEPSS 0%
- XSS
adenion · blog2socialAug 1, 2024
CVE-2025-4133
21Monitor
Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 0%
- XSS
adenion · blog2socialMay 22, 2025
CVE-2022-3622
16Monitor
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
MediumCVSS 4.1No exploitEPSS 0%
- Broken access control (IDOR)
adenion · blog2socialOct 20, 2023