Medium
CVE-2026-92829
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filters
Medium
CVE-2026-89030
Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Missing Authorization
Medium
CVE-2026-89029
Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Authenticated (Subscriber+) Username Enumeration
Medium
CVE-2026-89031
Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Insecure Direct Object Reference
High
CVE-2026-56044
Blog2Social: Social Media Auto Post & Scheduler <= 8.9.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-7051
Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter
Medium
CVE-2026-4330
Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter
Medium
CVE-2026-4331
Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action
Medium
CVE-2026-1942
Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
Medium
CVE-2025-14943
Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-13558
Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing
Medium
CVE-2025-12560
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
Medium
CVE-2025-12563
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload
Medium
CVE-2025-5673
Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter
Medium
CVE-2025-4133
Blog2Social: Social Media Auto Post & Scheduler <= 8.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7302
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Critical
CVE-2024-3549
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-3678
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure
Medium
CVE-2023-3936
Blog2Social: Social Media Auto Post & Scheduler <= 7.2.0 - Reflected Cross-Site Scripting
High
CVE-2022-3246
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-3247
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-3622
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
High
02b61eb1-a93f-4437-87de-d698af8ef9f6
Blog2Social <= 6.9.3 - PHP Object Injection
Medium
CVE-2021-24956
Blog2Social <= 6.8.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.