Blog2Social: Social Media Auto Post & Scheduler

Уязвимости

• CVE-2024-3549подписчик+≤ 7.4.1

  Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection

  Критич. 9.9

• CVE-2019-13572без авторизации

  The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.

  Критич. 9.8

• CVE-2026-56044без авторизации · нужен клик≤ 8.9.2

  WordPress Blog2Social plugin <= 8.9.2 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-1942подписчик+≤ 8.7.4

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification

  Средний 6.5

• CVE-2025-5673подписчик+≤ 8.4.4

  Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter

  Средний 6.5

• CVE-2023-40554без авторизации · нужен клик≤ 7.2.0

  WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2019-17550без авторизации · нужен клик

  The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS).

  Средний 6.1

• CVE-2019-9576без авторизации · нужен клик

  The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.

  Средний 6.1

• CVE-2026-7051подписчик+≤ 8.9.0

  Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' P

  Средний 5.4

• CVE-2025-13558подписчик+≤ 8.7.0

  Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing

  Средний 5.4

• CVE-2024-7302автор+≤ 7.5.4

  Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload

  Средний 5.4

• CVE-2024-3678без авторизации≤ 7.4.2

  Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure

  Средний 5.3

• CVE-2026-89031нужен вход→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post

  Средний 5.3

• CVE-2026-89030нужен вход→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_user

  Средний 5.3

• CVE-2026-89029нужен вход→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX Handler

  Средний 5.3

• CVE-2026-4330подписчик+≤ 8.8.3

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification

  Средний 4.3

• CVE-2026-4331подписчик+≤ 8.8.2

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_soci

  Средний 4.3

• CVE-2025-14943подписчик+≤ 8.7.2

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

  Средний 4.3

• CVE-2025-12563подписчик+≤ 8.6.0

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload

  Средний 4.3

• CVE-2025-12560подписчик+≤ 8.6.0

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url

  Средний 4.3

• CVE-2026-92829участник+≤ 9.1.0

  Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handle

  Средний 4.3

• CVE-2022-3622подписчик+≤ 6.9.11

  Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update

  Средний 4.1