Skip to content
OpenAdvisories

Vendor

Adenion

4 known vulnerabilities.

Products

Blog2Social 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-89031

    Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post

    Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users. The b2s_calendar_move_post AJAX handler in includes/Ajax/Post.php issues an UPDATE against the b2s_posts table using only th…

    Adenion Blog2Social Web / CMS
  • Medium 4.3
    CVE-2026-89030

    Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_user

    Adenion Blog2Social plugin for WordPress before 9.1.0 exposes the email addresses of all registered WordPress users to low-privileged accounts. The b2s_search_user AJAX handler in includes/Ajax/Get.php invokes B2S_Tools::searchUser() in includes/Tools.php, wh…

    Adenion Blog2Social Web / CMS
  • Medium 4.3
    CVE-2026-89029

    Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX Handler

    Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to enumerate WordPress user accounts. The b2s_get_select_mandant_user AJAX handler in includes/Ajax/Get.php resolves arbitrary user IDs supplied in the owner parameter to displa…

    Adenion Blog2Social Web / CMS