Adenion Blog2Social any version

Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.

Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection

Blog2Social < 6.9.10 - Subscriber+ SQLi

WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)

Blog2Social < 6.9.10 - Subscriber+ SSRF

Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload

Blog2Social < 6.8.7 - Reflected Cross-Site Scripting

The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.

The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2s_id parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.

Blog2Social < 7.2.1 - Reflected XSS

Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS

Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure

Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update