Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Priority LOW 21CWE-862Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-862.
Summary
The Blog2Social plugin for WordPress is vulnerable to authorization bypass due to missing capability checks in versions up to, and including, 6.9.11. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change some plugin settings intended to be modifiable by admins only.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0059 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| pr-gateway | Blog2Social: Social Media Auto Post & Scheduler | up to 6.9.11 | — | No fix listed | CNA |
- Blog2Social: Social Media Auto Post & Scheduler Vendorpr-gateway Affected up to 6.9.11 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:adenion:blog2social:*:*:*:*:*:wordpress:*:* | up to 6.9.11 | Vulnerable | pr-gateway |
- cpe:2.3:a:adenion:blog2social:*:*:*:*:*:wordpress:*:* Versions up to 6.9.11 Vulnerable ·pr-gateway
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3622
- 2026-10-03 Alias added: GHSA-2wq9-hq2m-2hfq
References
Patch 3
- https://plugins.trac.wordpress.org/browser/blog2social/tags/6.9.10/includes/B2S/Settings/Item.php#L116
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2795052%40blog2social&new=2795052%40blog2social&sfp_email=&sfph_mail=
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2796598%40blog2social&new=2796598%40blog2social&sfp_email=&sfph_mail=
More pr-gateway Blog2social vulnerabilities
- TI-2022-02999 Blog2Social < 6.9.10 - Subscriber+ SQLi CVSS 3.1HIGH 8.8
- TI-2022-03000 Blog2Social < 6.9.10 - Subscriber+ SSRF CVSS 3.1MEDIUM 6.5
- TI-2023-03658 Blog2Social < 7.2.1 - Reflected XSS CVSS 3.1MEDIUM 6.1
- TI-2025-03671 Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS CVSS 3.1MEDIUM 5.4
- TI-2019-10204 The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection. CVSS 3.1CRITICAL 9.8
- TI-2024-03309 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection CVSS 3.1CRITICAL 9.9
Sources
- CVE-2022-3622 · CVE Program
- CVE-2022-3622 · NVD
- FIRST EPSS
- GHSA-2wq9-hq2m-2hfq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences