Advisories · Technology
pr-gateway Blog2Social: Social Media Auto Post & Scheduler.
Every CVE that names pr-gateway Blog2Social: Social Media Auto Post & Scheduler among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 4.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 5.4 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 4.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 4.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 6.5 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 4.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 5.4 Medium
Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 4.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 6.5 Medium
Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- SQL injection
- CVSS 6.4 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- SQL injection
- CVSS 5.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control
- CVSS 4.1 Medium
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Broken access control