pr-gateway vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20254
4. 20267

Newest CVEs

• CVE-2026-108092

  Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium4.3
• CVE-2026-92829

  Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium4.3
• CVE-2026-7051

  Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium5.4
• CVE-2026-4330

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium4.3
• CVE-2026-4331

  Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium4.3
• CVE-2026-1942

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium6.5
• CVE-2025-14943

  Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium4.3
• CVE-2025-13558

  Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium5.4
• CVE-2025-12560

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium4.3
• CVE-2025-12563

  Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload

  pr-gateway · Blog2Social: Social Media Auto Post & Scheduler

  Medium4.3