Plugin icon

Blog2Social: Social Media Auto Post & Scheduler

blog2social

Vulnerabilities:

21

Last Updated:

March 30, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-03-25
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.8.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action
Fixed in
Fixed in 8.8.3
CVSS
4.3 (medium)
Published
2026-02-17
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
Fixed in
Fixed in 8.7.5
CVSS
6.5 (medium)
Published
2026-01-09
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.7.3 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Fixed in
Fixed in 8.7.3
CVSS
4.3 (medium)
Published
2025-11-24
Title
Blog2Social < 8.7.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing
Fixed in
Fixed in 8.7.1
CVSS
5.4 (medium)
Published
2025-11-05
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.6.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
Fixed in
Fixed in 8.6.1
CVSS
4.3 (medium)
Published
2025-11-05
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.6.1 - Incorrect Authorization to Video File Upload
Fixed in
Fixed in 8.6.1
CVSS
4.3 (medium)
Published
2025-06-16
Title
Blog2Social < 8.4.5 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter
Fixed in
Fixed in 8.4.5
CVSS
6.5 (medium)
Published
2025-05-01
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS
Fixed in
Fixed in 8.4.0
CVSS
5.9 (medium)
Published
2024-07-31
Title
Blog2Social: Social Media Auto Post & Scheduler < 7.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Fixed in
Fixed in 7.5.5
CVSS
6.4 (medium)
Published
2024-06-10
Title
Blog2Social: Social Media Auto Post & Scheduler < 7.4.2 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 7.4.2
CVSS
9.9 (critical)
Published
2024-04-25
Title
Blog2Social: Social Media Auto Post & Scheduler < 7.5.0 - Information Exposure
Fixed in
Fixed in 7.5.0
CVSS
5.3 (medium)
Published
2023-07-31
Title
Blog2Social < 7.2.1 - Reflected XSS
Fixed in
Fixed in 7.2.1
CVSS
7.1 (high)
Published
2022-11-08
Title
Blog2Social < 6.9.12 - Subscriber+ Settings Update
Fixed in
Fixed in 6.9.12
CVSS
5.3 (medium)
Published
2022-10-03
Title
Blog2Social < 6.9.10 - Subscriber+ SSRF
Fixed in
Fixed in 6.9.10
CVSS
4.3 (medium)
Published
2022-10-03
Title
Blog2Social < 6.9.10 - Subscriber+ SQLi
Fixed in
Fixed in 6.9.10
CVSS
7.7 (high)
Published
2021-11-22
Title
Blog2Social < 6.8.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 6.8.7
CVSS
8.8 (high)
Published
2020-05-29
Title
Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
Fixed in
Fixed in 6.3.1
CVSS
9.9 (critical)
Published
2019-11-14
Title
Blog2Social < 5.9.0 - Cross-Site Scripting Issue
Fixed in
Fixed in 5.9.0
CVSS
6.1 (medium)
Published
2019-07-25
Title
Blog2Social < 5.6.0 - SQL Injection
Fixed in
Fixed in 5.6.0
CVSS
9.8 (critical)
Published
2019-02-05
Title
Blog2Social <= 5.0.2 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 5.0.3
CVSS
6.1 (medium)
Published
2018-09-21
Title
Blog2Social <= 5.0.0 - PHP Obj Injection
Fixed in
Fixed in 5.0.1
CVSS
n/a