WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Blog2Social: Social Media Auto Post & Scheduler

Automatically share and schedule your WordPress content on top social platforms like Facebook, Instagram, LinkedIn, TikTok, and more.

25Reported vulnerabilities
9.9Highest CVSS score
9.0.2Latest version
50,000+Active installs

What to do now

Update Blog2Social: Social Media Auto Post & Scheduler to 8.9.3 or later. 25 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 21, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2021-24137 High 8.8 1.5% Before 6.3.1 6.3.1 March 18, 2021
CVE-2022-3246 High 8.8 1.1% Before 6.9.10 6.9.10 October 25, 2022
CVE-2022-3247 Medium 6.5 0.7% Before 6.9.10 6.9.10 October 25, 2022
CVE-2021-24956 Medium 6.1 1.4% Before 6.8.7 6.8.7 December 21, 2021
CVE-2019-13572 Critical 9.8 2.2% 5.5.0 and earlier 5.6.0 August 1, 2019
CVE-2019-9576 Medium 6.1 1.4% Before 5.0.3 5.0.3 March 5, 2019
CVE-2023-3936 Medium 6.1 0.9% Before 7.2.1 7.2.1 August 21, 2023
CVE-2024-3549 Critical 9.9 0.5% Before 7.4.2 7.4.2 June 11, 2024
CVE-2025-4133 Medium 5.4 0.3% Before 8.4.0 8.4.0 May 22, 2025
WF-02b61eb1-a93f-4437-87de-d698af8ef9f6 High 8.5 6.9.3 and earlier 6.9.4 April 5, 2022
CVE-2026-56044 High 7.2 0.3% 8.9.2 and earlier 8.9.3 June 25, 2026
WF-6b8655a6-f410-480d-8c45-2527b53fa129 High 7.4 Before 5.0.1 5.0.1 September 21, 2018
CVE-2026-1942 Medium 6.5 0.3% 0 to 8.7.4 (inclusive) 8.7.5 February 18, 2026
CVE-2025-5673 Medium 6.5 0.3% 0 to 8.4.4 (inclusive) 8.4.5 June 17, 2025
CVE-2019-17550 Medium 6.1 1.3% Before 5.9.0 5.9.0 November 13, 2019
CVE-2026-7051 Medium 5.4 0.4% 0 to 8.9.0 (inclusive) 8.9.1 May 13, 2026
CVE-2025-13558 Medium 5.4 0.3% 0 to 8.7.0 (inclusive) 8.7.1 November 25, 2025
CVE-2024-7302 Medium 5.4 0.4% Before 7.5.5 7.5.5 August 1, 2024
CVE-2024-3678 Medium 5.3 0.6% Before 7.5.0 7.5.0 April 26, 2024
CVE-2026-4330 Medium 4.3 0.5% 0 to 8.8.3 (inclusive) 8.8.4 April 8, 2026
CVE-2026-4331 Medium 4.3 0.2% 0 to 8.8.2 (inclusive) 8.8.3 March 26, 2026
CVE-2025-14943 Medium 4.3 0.2% 0 to 8.7.2 (inclusive) 8.7.3 January 10, 2026
CVE-2025-12560 Medium 4.3 0.2% 0 to 8.6.0 (inclusive) 8.6.1 November 6, 2025
CVE-2025-12563 Medium 4.3 0.2% 0 to 8.6.0 (inclusive) 8.6.1 November 6, 2025
CVE-2022-3622 Medium 4.1 0.6% 6.9.11 and earlier 6.9.12 October 20, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.