Extension WordPress
Vulnérabilités Blog2Social: Social Media Auto Post & Scheduler, page 2
Cette page rassemble les failles publiées pour Blog2Social: Social Media Auto Post & Scheduler, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Blog2Social: Social Media Auto Post & Scheduler
25 fiches
Blog2Social: Social Media Auto Post & Scheduler <= 6.3.0 – Authenticated SQL Injection
Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands.
*-6.3.0
6.3.1
29/05/2020
Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 – Reflected Cross-Site Scripting via b2s_id Parameter
The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2s_id parameter. The component is: views/b2s/post.calendar.php. The attack vector…
[*, 5.9.0)
5.9.0
14/11/2019
Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 – SQL Injection
The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.
[*, 5.6.0)
5.6.0
25/07/2019
Blog2Social: Social Media Auto Post & Scheduler <= 5.0.2 – Reflected Cross-Site Scripting
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘b2s_update_publish_date=' parameter in versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping. This makes…
[*, 5.0.3)
5.0.3
02/05/2019
Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 – PHP Object Injection
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 5.0.0 via deserialization of untrusted input in the vulnerable function named curationShare. This allows authenticated…
[*, 5.0.1)
5.0.1
21/09/2018
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.