CVE-2025-12560

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 8.6.0 via the getFullContent function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make we...

CVE-2025-12560

CVE-2025-12560 affects Blog2Social: Social Media Auto Post & Scheduler for WordPress. According to multiple sources, versions up to and including 8.6.0 are vulnerable to a Server-Side Request Forgery via the getFullContent() function, exploitable by authenticated users with Subscriber-level acces...