Blog2Social: Social Media Auto Post & Scheduler

Software Type	Plugin
Software Slug	blog2social (view on wordpress.org)
Software Status	Active
Software Author	pr-gateway
Software Website	www.blog2social.com
Software Downloads	3,482,275
Software Active Installs	60,000
Software Record Last Updated	May 7, 2024

12 Vulnerabilities

Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure

5.3

CVE-2024-3678

Apr 25, 2024

Researcher: Krzysztof Zając

Blog2Social: Social Media Auto Post & Scheduler <= 7.2.0 - Reflected Cross-Site Scripting

6.1

CVE-2023-3936

Jul 26, 2023

Researcher: Erwan LR

Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery

7.4

CVE-2022-3247

Oct 3, 2022

Researcher: Saggre

Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection

8.8

CVE-2022-3246

Oct 3, 2022

Researcher: Saggre

Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update

4.7

CVE-2022-3622

Sep 27, 2022

Researcher: Marco Wotschka

Blog2Social <= 6.9.3 - PHP Object Injection

8.5

CVE ID Unknown

Apr 5, 2022

Researchers:

Blog2Social <= 6.8.6 - Reflected Cross-Site Scripting

6.1

CVE-2021-24956

Nov 22, 2021

Researcher: ZhongFu Su

Blog2Social: Social Media Auto Post & Scheduler <= 6.3.0 - Authenticated SQL Injection

8.8

CVE-2021-24137

May 29, 2020

Researcher: Nguyen Anh Tien

Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 - Reflected Cross-Site Scripting via b2s_id Parameter

6.1

CVE-2019-17550

Nov 14, 2019

Researchers:

Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection

9.8

CVE-2019-13572

Jul 25, 2019

Researcher: Tin Duong

Blog2Social: Social Media Auto Post & Scheduler <= 5.0.2 - Reflected Cross-Site Scripting

6.1

CVE-2019-9576

May 2, 2019

Researcher: Tim Coen

Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection

7.4

CVE ID Unknown

Sep 21, 2018

Researcher: Plugin Vulnerabilities

Title	CVE ID	CVSS	Researchers	Date
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure	CVE-2024-3678	5.3	Krzysztof Zając	April 25, 2024
Blog2Social: Social Media Auto Post & Scheduler <= 7.2.0 - Reflected Cross-Site Scripting	CVE-2023-3936	6.1	Erwan LR	July 26, 2023
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery	CVE-2022-3247	7.4	Saggre	October 3, 2022
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection	CVE-2022-3246	8.8	Saggre	October 3, 2022
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update	CVE-2022-3622	4.7	Marco Wotschka	September 27, 2022
Blog2Social <= 6.9.3 - PHP Object Injection		8.5		April 5, 2022
Blog2Social <= 6.8.6 - Reflected Cross-Site Scripting	CVE-2021-24956	6.1	ZhongFu Su	November 22, 2021
Blog2Social: Social Media Auto Post & Scheduler <= 6.3.0 - Authenticated SQL Injection	CVE-2021-24137	8.8	Nguyen Anh Tien	May 29, 2020
Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 - Reflected Cross-Site Scripting via b2s_id Parameter	CVE-2019-17550	6.1		November 14, 2019
Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection	CVE-2019-13572	9.8	Tin Duong	July 25, 2019
Blog2Social: Social Media Auto Post & Scheduler <= 5.0.2 - Reflected Cross-Site Scripting	CVE-2019-9576	6.1	Tim Coen	May 2, 2019
Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection		7.4	Plugin Vulnerabilities	September 21, 2018

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation