Vulnerability · Published Sep 16, 2026 · Assigned by VulnCheck

CVE-2026-89029Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX Handler

Medium 4.3

In plain English

A medium-severity authorization bypass via user-controlled key in Blog2Social from Adenion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 79.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to enumerate WordPress user accounts. The b2s_get_select_mandant_user AJAX handler in includes/Ajax/Get.php resolves arbitrary user IDs supplied in the owner parameter to display names without verifying that the caller is authorized to read user account data, allowing any user with the edit_posts capability to map WordPress user IDs to display names and confirm account existence for arbitrary IDs.

Affected products (as reported)

Vendor	Product	Versions
Adenion	Blog2Social	0 – before 9.1.0

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

WordPress Changelog release-notes, patch
https://www.vulncheck.com/advisories/blog2social-wordpress-plugin-user-enumeration-via-ajax-handler third-party-advisory