Blog2social Social Media Auto Post Scheduler (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-05-22. Vendor: Unknown.

CVEs of Blog2social Social Media Auto Post Scheduler

• CVE-2025-4133 - CVSS 5.4 (medium), 2025-05-22: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 8.4.0 does not escape the title of posts when outputting them in a dashboard,…
• CVE-2023-3936 - CVSS 6.1 (medium), 2023-08-21: The Blog2Social WordPress plugin before 7.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2022-3247 - CVSS 6.5 (medium), 2022-10-25: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the…
• CVE-2022-3246 - CVSS 8.8 (high), 2022-10-25: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL…
• CVE-2021-24956 - CVSS 6.1 (medium), 2021-12-21: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting…
• CVE-2021-24137 - CVSS 8.8 (high), 2021-03-18: Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated…