Pr-gateway vulnerabilities

Products

• Blog2social: Social Media Auto Post & Scheduler 22

Newest

• pr-gateway blog2social: social media auto post & scheduler Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure CVE-2026-108092 4.3 MediumOctober 15, 2026
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers CVE-2026-92829 4.3 MediumSeptember 25, 2026
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter CVE-2026-7051 5.4 MediumMay 13, 2026
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter CVE-2026-4330 4.3 MediumApril 8, 2026
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action CVE-2026-4331 4.3 MediumMarch 26, 2026
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification CVE-2026-1942 6.5 MediumFebruary 18, 2026
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure CVE-2025-14943 4.3 MediumJanuary 10, 2026
• pr-gateway blog2social: social media auto post & scheduler Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing CVE-2025-13558 5.4 MediumNovember 25, 2025
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url CVE-2025-12560 4.3 MediumNovember 6, 2025
• pr-gateway blog2social: social media auto post & scheduler Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload CVE-2025-12563 4.3 MediumNovember 6, 2025
• pr-gateway blog2social: social media auto post & scheduler Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter CVE-2025-5673 6.5 MediumJune 17, 2025
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS CVE-2025-4133 5.4 MediumMay 22, 2025
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload CVE-2024-7302 6.4 MediumAugust 1, 2024
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection CVE-2024-3549 9.9 CriticalJune 11, 2024
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure CVE-2024-3678 5.3 MediumApril 26, 2024
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update CVE-2022-3622 4.1 MediumOctober 20, 2023
• adenion blog2social, blog2social, adenion blog2social: social media auto post & scheduler +1 more WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-40554 7.1 HighSeptember 6, 2023
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social < 7.2.1 - Reflected XSS CVE-2023-3936 6.1 MediumAugust 21, 2023
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social < 6.9.10 - Subscriber+ SSRF CVE-2022-3247 6.5 MediumOctober 25, 2022
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social < 6.9.10 - Subscriber+ SQLi CVE-2022-3246 8.8 HighOctober 25, 2022
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social < 6.8.7 - Reflected Cross-Site Scripting CVE-2021-24956 6.1 MediumDecember 21, 2021
• adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 more Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection CVE-2021-24137 8.8 HighMarch 18, 2021