pr-gateway Blog2Social: Social Media Auto Post & Scheduler

• CVE-2026-108092 Medium 4.3 Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure 0.3%
• CVE-2026-92829 Medium 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers 0.4%
• CVE-2026-7051 Medium 5.4 Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter 0.4%
• CVE-2026-4330 Medium 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter 0.6%
• CVE-2026-4331 Medium 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action 0.3%
• CVE-2026-1942 Medium 6.5 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification 0.4%
• CVE-2025-14943 Medium 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure 0.2%
• CVE-2025-13558 Medium 5.4 Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing 0.3%
• CVE-2025-12560 Medium 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url 0.2%
• CVE-2025-12563 Medium 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload 0.2%
• CVE-2025-5673 Medium 6.5 Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter 0.3%
• CVE-2024-7302 Medium 6.4 Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload 0.4%
• CVE-2024-3549 Critical 9.9 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection 0.5%
• CVE-2024-3678 Medium 5.3 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure 0.6%
• CVE-2022-3622 Medium 4.1 Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.6%