Blog2Social: Social Media Auto Post & Scheduler

Güvenlik açıkları

• CVE-2024-3549abone+≤ 7.4.1

  Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection

  Kritik 9.9

• CVE-2019-13572kimlik doğrulamasız

  The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.

  Kritik 9.8

• CVE-2026-56044kimlik doğrulamasız · tıklama gerekir≤ 8.9.2

  WordPress Blog2Social plugin <= 8.9.2 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-1942abone+≤ 8.7.4

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification

  Orta 6.5

• CVE-2025-5673abone+≤ 8.4.4

  Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter

  Orta 6.5

• CVE-2023-40554kimlik doğrulamasız · tıklama gerekir≤ 7.2.0

  WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2019-17550kimlik doğrulamasız · tıklama gerekir

  The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS).

  Orta 6.1

• CVE-2019-9576kimlik doğrulamasız · tıklama gerekir

  The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.

  Orta 6.1

• CVE-2026-7051abone+≤ 8.9.0

  Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' P

  Orta 5.4

• CVE-2025-13558abone+≤ 8.7.0

  Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing

  Orta 5.4

• CVE-2024-7302yazar+≤ 7.5.4

  Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload

  Orta 5.4

• CVE-2024-3678kimlik doğrulamasız≤ 7.4.2

  Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure

  Orta 5.3

• CVE-2026-89031giriş gerekir→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post

  Orta 5.3

• CVE-2026-89030giriş gerekir→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_user

  Orta 5.3

• CVE-2026-89029giriş gerekir→ 9.1.0

  Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX Handler

  Orta 5.3

• CVE-2026-4330abone+≤ 8.8.3

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification

  Orta 4.3

• CVE-2026-4331abone+≤ 8.8.2

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_soci

  Orta 4.3

• CVE-2025-14943abone+≤ 8.7.2

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

  Orta 4.3

• CVE-2025-12563abone+≤ 8.6.0

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload

  Orta 4.3

• CVE-2025-12560abone+≤ 8.6.0

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url

  Orta 4.3

• CVE-2026-92829katılımcı+≤ 9.1.0

  Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handle

  Orta 4.3

• CVE-2022-3622abone+≤ 6.9.11

  Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update

  Orta 4.1