Skip to contentPr-gateway Blog2social: Social Media Auto Post & Scheduler vulnerabilities
- pr-gateway blog2social: social media auto post & schedulerSocial Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information ExposureCVE-2026-1080924.3 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX HandlersCVE-2026-928294.3 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' ParameterCVE-2026-70515.4 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' ParameterCVE-2026-43304.3 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX ActionCVE-2026-43314.3 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post ModificationCVE-2026-19426.5 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information ExposureCVE-2025-149434.3 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post TrashingCVE-2025-135585.4 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_urlCVE-2025-125604.3 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File UploadCVE-2025-125634.3 Medium
- pr-gateway blog2social: social media auto post & schedulerBlog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` ParameterCVE-2025-56736.5 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSSCVE-2025-41335.4 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File UploadCVE-2024-73026.4 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL InjectionCVE-2024-35499.9 Critical
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information ExposureCVE-2024-36785.3 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings UpdateCVE-2022-36224.1 Medium
- adenion blog2social, blog2social, adenion blog2social: social media auto post & scheduler +1 moreWordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-405547.1 High
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 7.2.1 - Reflected XSSCVE-2023-39366.1 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 6.9.10 - Subscriber+ SSRFCVE-2022-32476.5 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 6.9.10 - Subscriber+ SQLiCVE-2022-32468.8 High
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 6.8.7 - Reflected Cross-Site ScriptingCVE-2021-249566.1 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL InjectionCVE-2021-241378.8 High