Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Blog2Social: Social Media Auto Post & Scheduler 6.9.10 Clear all filters
TI-2022-03000 CVE-2022-3247 · GHSA-q28w-jq68-2wfw

Blog2Social < 6.9.10 - Subscriber+ SSRF

Priority MEDIUM 62

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00885 Published 2022-10-25 Fixed in 6.9.10 CWE-918
TI-2022-02999 CVE-2022-3246 · GHSA-p75m-5rhq-4xg7

Blog2Social < 6.9.10 - Subscriber+ SQLi

Priority HIGH 73

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authe…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01513 Published 2022-10-25 Fixed in 6.9.10 CWE-89