Blog2Social: Social Media Auto Post & Scheduler

Vulnerabilities

• CVE-2024-3549

  Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection

  Critical 9.9

• CVE-2019-13572

  The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.

  Critical 9.8

• CVE-2026-56044

  WordPress Blog2Social plugin <= 8.9.2 - Cross Site Scripting (XSS) vulnerability

  High 7.1

• CVE-2026-1942

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification

  Medium 6.5

• CVE-2025-5673

  Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter

  Medium 6.5

• CVE-2023-40554

  WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)

  Medium 6.1

• CVE-2019-17550

  The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS).

  Medium 6.1

• CVE-2019-9576

  The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.

  Medium 6.1

• CVE-2026-7051

  Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' P

  Medium 5.4

• CVE-2025-13558

  Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing

  Medium 5.4

• CVE-2024-7302

  Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload

  Medium 5.4

• CVE-2026-89031→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post

  Medium 5.3

• CVE-2026-89030→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_user

  Medium 5.3

• CVE-2026-89029→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX Handler

  Medium 5.3

• CVE-2024-3678

  Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure

  Medium 5.3

• CVE-2026-92829

  Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handle

  Medium 4.3

• CVE-2026-4330

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification

  Medium 4.3

• CVE-2026-4331

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_soci

  Medium 4.3

• CVE-2025-14943

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

  Medium 4.3

• CVE-2025-12563

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload

  Medium 4.3

• CVE-2025-12560

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url

  Medium 4.3

• CVE-2022-3622

  Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update

  Medium 4.1