Blog2Social
Adenion
Developer
9.1.5
Latest version
40,000
Installations
No date
Last updated
Vulnerability history
0 present
27 patched
11 Mitigation rules
- Missing Authorization to Authenticated (Contributor+) Arbitrary Modification vulnerability<= 9.1.024/09/2026
- Missing Authorization vulnerability<= 9.0.016/09/2026
- Insecure Direct Object Reference vulnerability<= 9.0.016/09/2026
- Authenticated (Subscriber+) Username Enumeration vulnerability<= 9.0.016/09/2026
- Cross Site Scripting (XSS) vulnerability<= 8.9.225/06/2026
- Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records vulnerability<= 8.9.012/05/2026
- Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter vulnerability<= 8.8.308/04/2026
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action vulnerability<= 8.8.227/03/2026
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability<= 8.7.419/02/2026
- Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability<= 8.7.209/01/2026
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing vulnerability<= 8.7.024/11/2025
- Incorrect Authorization to Video File Upload vulnerability<= 8.6.006/11/2025
- Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url vulnerability<= 8.6.006/11/2025
- Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter vulnerability<= 8.4.417/06/2025
- Contributor+ Stored XSS vulnerability< 8.4.022/05/2025
- Authenticated (Author+) Stored Cross-Site Scripting via File Upload vulnerability<= 7.5.401/08/2024
- Authenticated (Subscriber+) SQL Injection vulnerability<= 7.4.111/06/2024
- Information Exposure vulnerability<= 7.4.226/04/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 7.2.016/08/2023
- Missing Authorization to Auth. Settings Update vulnerability<= 6.9.1108/11/2022
- Authenticated Server-Side Request Forgery (SSRF) vulnerability<= 6.9.903/10/2022
- Authenticated SQL Injection (SQLi) vulnerability<= 6.9.903/10/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 6.8.622/11/2021
- Authenticated SQL Injection (SQLi) vulnerability<= 6.3.009/06/2020
- Cross-Site Scripting (XSS) vulnerability<= 5.8.114/11/2019
- SQL Injection (SQLi) vulnerability<= 5.5.026/07/2019
- Authenticated Cross-Site Scripting (XSS) vulnerability<= 5.0.212/03/2019