CVE-2026-92829 (GCVE-0-2026-92829)
Vulnerability from cvelistv5
Published
2026-09-25 06:39
Modified
2026-09-25 13:00
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-862 - Missing Authorization
Summary
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to view, modify, or delete other users' Blog2Social records, including disclosing another user's network authentication IDs and scheduled post content, overwriting Open Graph and Twitter Card post metadata on posts they do not own, rebinding another user's social-network authorization, and mass-hiding all users' scheduled posts sitewide. The plugin's b2s_security_nonce is emitted on the post-edit meta box, which Contributors can render, making the nonce available to any authenticated user at that role level or above.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| pr-gateway | Blog2Social: Social Media Auto Post & Scheduler |
Version: 0 ≤ 9.1.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-92829",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-25T12:52:50.739317Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-25T13:00:16.582Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Blog2Social: Social Media Auto Post \u0026 Scheduler",
"vendor": "pr-gateway",
"versions": [
{
"lessThanOrEqual": "9.1.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Averon Averenkov (Averon Averenkov)"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Blog2Social: Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to view, modify, or delete other users\u0027 Blog2Social records, including disclosing another user\u0027s network authentication IDs and scheduled post content, overwriting Open Graph and Twitter Card post metadata on posts they do not own, rebinding another user\u0027s social-network authorization, and mass-hiding all users\u0027 scheduled posts sitewide. The plugin\u0027s b2s_security_nonce is emitted on the post-edit meta box, which Contributors can render, making the nonce available to any authenticated user at that role level or above."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-25T06:39:55.197Z",
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence"
},
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c712972d-c6b2-46be-8c93-27a7e7c920a0?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L4475"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/B2S/Post/Tools.php#L166"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Get.php#L695"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/B2S/Calendar/Filter.php#L218"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L2572"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L2302"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L1859"
},
{
"url": "https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.1/includes/Ajax/Post.php"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-16T21:07:30.000Z",
"value": "Vendor Notified"
},
{
"lang": "en",
"time": "2026-09-24T18:10:48.000Z",
"value": "Disclosed"
}
],
"title": "Blog2Social: Social Media Auto Post \u0026 Scheduler \u003c= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers"
}
},
"cveMetadata": {
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"assignerShortName": "Wordfence",
"cveId": "CVE-2026-92829",
"datePublished": "2026-09-25T06:39:55.197Z",
"dateReserved": "2026-09-16T20:52:26.203Z",
"dateUpdated": "2026-09-25T13:00:16.582Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-92829\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-25T12:52:50.739317Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-25T12:56:10.122Z\"}}], \"cna\": {\"title\": \"Blog2Social: Social Media Auto Post \u0026 Scheduler \u003c= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers\", \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Averon Averenkov (Averon Averenkov)\"}], \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\"}}], \"affected\": [{\"vendor\": \"pr-gateway\", \"product\": \"Blog2Social: Social Media Auto Post \u0026 Scheduler\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"9.1.0\"}], \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-09-16T21:07:30.000Z\", \"value\": \"Vendor Notified\"}, {\"lang\": \"en\", \"time\": \"2026-09-24T18:10:48.000Z\", \"value\": \"Disclosed\"}], \"references\": [{\"url\": \"https://www.wordfence.com/threat-intel/vulnerabilities/id/c712972d-c6b2-46be-8c93-27a7e7c920a0?source=cve\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L4475\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/B2S/Post/Tools.php#L166\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Get.php#L695\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/B2S/Calendar/Filter.php#L218\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L2572\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L2302\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.0/includes/Ajax/Post.php#L1859\"}, {\"url\": \"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.1/includes/Ajax/Post.php\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The Blog2Social: Social Media Auto Post \u0026 Scheduler plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to view, modify, or delete other users\u0027 Blog2Social records, including disclosing another user\u0027s network authentication IDs and scheduled post content, overwriting Open Graph and Twitter Card post metadata on posts they do not own, rebinding another user\u0027s social-network authorization, and mass-hiding all users\u0027 scheduled posts sitewide. The plugin\u0027s b2s_security_nonce is emitted on the post-edit meta box, which Contributors can render, making the nonce available to any authenticated user at that role level or above.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-862\", \"description\": \"CWE-862 Missing Authorization\"}]}], \"providerMetadata\": {\"orgId\": \"b15e7b5b-3da4-40ae-a43c-f7aa60e62599\", \"shortName\": \"Wordfence\", \"dateUpdated\": \"2026-09-25T06:39:55.197Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-92829\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-25T13:00:16.582Z\", \"dateReserved\": \"2026-09-16T20:52:26.203Z\", \"assignerOrgId\": \"b15e7b5b-3da4-40ae-a43c-f7aa60e62599\", \"datePublished\": \"2026-09-25T06:39:55.197Z\", \"assignerShortName\": \"Wordfence\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…