WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
blog2social
Published
2022-10-03
Title
Blog2Social < 6.9.10 - Subscriber+ SSRF
Slug
blog2social
Published
2022-10-03
Title
Blog2Social < 6.9.10 - Subscriber+ SQLi
Slug
blog2social
Published
2022-11-08
Title
Blog2Social < 6.9.12 - Subscriber+ Settings Update
Slug
blog2social
Published
2023-07-31
Title
Blog2Social < 7.2.1 - Reflected XSS
Slug
blog2social
Published
2024-04-25
Title
Blog2Social: Social Media Auto Post & Scheduler < 7.5.0 - Information Exposure
Slug
blog2social
Published
2024-06-10
Title
Blog2Social: Social Media Auto Post & Scheduler < 7.4.2 - Authenticated (Subscriber+) SQL Injection
Slug
blog2social
Published
2024-07-31
Title
Blog2Social: Social Media Auto Post & Scheduler < 7.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Slug
blog2social
Published
2025-05-01
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS
Slug
blog2social
Published
2025-06-16
Title
Blog2Social < 8.4.5 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter
Slug
blog2social
Published
2025-11-05
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.6.1 - Incorrect Authorization to Video File Upload
Slug
blog2social
Published
2025-11-05
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.6.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
Slug
blog2social
Published
2025-11-24
Title
Blog2Social < 8.7.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing
Slug
blog2social
Published
2026-01-09
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.7.3 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Slug
blog2social
Published
2026-02-17
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
Slug
blog2social
Published
2026-03-25
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.8.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action
Slug
blog2social
Published
2026-04-07
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.8.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter
Slug
blogbuzztime-for-wp
Published
2025-03-11
Title
BlogBuzzTime-for-wp <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
blogger-301-redirect
Published
2024-11-15
Title
Blogger 301 Redirect <= 2.5.3 - Unauthenticated SQL Injection via br
Slug
blogger-image-import
Published
2025-01-16
Title
Blogger Image Import 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
blogintroduction-wordpress-plugin
Published
2024-08-22
Title
Blog Introduction <= 0.3.0 - Settings Update via CSRF
Slug
bloglentor-for-elementor
Published
2024-05-06
Title
BlogLentor <= <=1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blogmentor
Published
2024-06-18
Title
Blogmentor – Blog Layouts for Elementor <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagination_style Parameter
Slug
blogpost-widgets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blogsafe-scanner
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blogsafe-scanner
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting