Blog2social
Adenion · 14 CVEs
Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post
Sep 16, 2026
Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_user
Sep 16, 2026
Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX Handler
Sep 16, 2026
WordPress Blog2Social plugin <= 8.9.2 - Cross Site Scripting (XSS) vulnerability
Jun 26, 2026
Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS
May 22, 2025
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File…
Aug 1, 2024
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection
Jun 11, 2024
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure
Apr 26, 2024
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Oct 20, 2023
WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)
Sep 6, 2023
Blog2Social < 7.2.1 - Reflected XSS
Aug 21, 2023
Blog2Social < 6.9.10 - Subscriber+ SSRF
Oct 25, 2022
Blog2Social < 6.9.10 - Subscriber+ SQLi
Oct 25, 2022
Blog2Social < 6.8.7 - Reflected Cross-Site Scripting
Dec 21, 2021
Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
Mar 18, 2021
The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an…
Nov 13, 2019
The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.
Aug 1, 2019
The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.
Mar 5, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-89031 | Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post | MEDIUM | 0.30% | Sep 16, 2026 |
| CVE-2026-89030 | Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_user | MEDIUM | 0.28% | Sep 16, 2026 |
| CVE-2026-89029 | Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX Handler | MEDIUM | 0.28% | Sep 16, 2026 |
| CVE-2026-56044 | WordPress Blog2Social plugin <= 8.9.2 - Cross Site Scripting (XSS) vulnerability | HIGH | 0.25% | Jun 26, 2026 |
| CVE-2025-4133 | Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS | MEDIUM | 0.28% | May 22, 2025 |
| CVE-2024-7302 | Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload | MEDIUM | 0.39% | Aug 1, 2024 |
| CVE-2024-3549 | Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection | CRITICAL | 0.52% | Jun 11, 2024 |
| CVE-2024-3678 | Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure | MEDIUM | 0.56% | Apr 26, 2024 |
| CVE-2022-3622 | Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update | MEDIUM | 0.59% | Oct 20, 2023 |
| CVE-2023-40554 | WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) | HIGH | 0.41% | Sep 6, 2023 |
| CVE-2023-3936 | Blog2Social < 7.2.1 - Reflected XSS | MEDIUM | 0.90% | Aug 21, 2023 |
| CVE-2022-3247 | Blog2Social < 6.9.10 - Subscriber+ SSRF | MEDIUM | 0.73% | Oct 25, 2022 |
| CVE-2022-3246 | Blog2Social < 6.9.10 - Subscriber+ SQLi | HIGH | 1.17% | Oct 25, 2022 |
| CVE-2021-24956 | Blog2Social < 6.8.7 - Reflected Cross-Site Scripting | MEDIUM | 1.44% | Dec 21, 2021 |
| CVE-2021-24137 | Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection | HIGH | 1.50% | Mar 18, 2021 |
| CVE-2019-17550 | The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and J… | MEDIUM | 1.34% | Nov 13, 2019 |
| CVE-2019-13572 | The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection. | CRITICAL | 2.18% | Aug 1, 2019 |
| CVE-2019-9576 | The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS. | MEDIUM | 1.41% | Mar 5, 2019 |
Showing 1 to 14 of 14 CVEs