Vulnerabilities

TI-2026-60340 CVE-2026-89031 · GHSA-f53j-3ghj-6c45

Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post

LOW 24

Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-09-16 Fixed in 9.1.0 CWE-639

TI-2026-60339 CVE-2026-89030 · GHSA-78j3-qgmg-rvq3

LOW 24

Adenion Blog2Social plugin for WordPress before 9.1.0 exposes the email addresses of all registered WordPress users to low-privileged accounts.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-09-16 Fixed in 9.1.0 CWE-862

TI-2026-60338 CVE-2026-89029 · GHSA-6r37-32vj-mjwv

LOW 24

Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to enumerate WordPress user accounts.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-09-16 Fixed in 9.1.0 CWE-639