{"id":"CVE-2026-108092","aliases":["EUVD-2026-101926","GHSA-rvmv-5vh5-f3w7"],"status":"published","title":"Social Media Auto Post \u0026 Scheduler \u003c=  9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure","description":"The Blog2Social – Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00251,"percentile":0.16604,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2026-10-15T07:42:37Z","modified":"2026-10-15T17:17:13Z","products":[{"vendor":"pr-gateway","product":"blog2social: social media auto post \u0026 scheduler"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b394ee3e-fc1c-40b5-b3c5-a9b5e44a7a14?source=cve"},{"url":"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L275"},{"url":"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L622"},{"url":"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L253"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108092"},{"url":"https://github.com/advisories/GHSA-rvmv-5vh5-f3w7"}],"sources":{"cve":[{"id":"CVE-2026-108092","title":"Social Media Auto Post \u0026 Scheduler \u003c=  9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure","description":"The Blog2Social – Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","status":"published","published":"2026-10-15T07:42:37.119Z","modified":"2026-10-15T16:43:39.977Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:20:10.510075Z"}],"euvd":[{"id":"EUVD-2026-101926","description":"The Blog2Social – Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","status":"published","published":"2026-10-15T07:42:37Z","modified":"2026-10-15T16:43:39Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T17:00:11.901066Z"}],"ghsa":[{"id":"GHSA-rvmv-5vh5-f3w7","title":"The Blog2Social – Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to...","description":"The Blog2Social – Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","status":"published","published":"2026-10-15T09:30:33Z","modified":"2026-10-15T09:30:45Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T15:13:35.252436Z"}],"nvd":[{"id":"CVE-2026-108092","description":"The Blog2Social – Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","status":"published","published":"2026-10-15T08:16:36.92Z","modified":"2026-10-15T17:17:13.837Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:12:59.328869Z"}]}}