CVE-2026-89031 Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_post

Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users. The b2scalendarmovepost AJAX handler in includes/Ajax/Post.php issues an UPDATE against the b2sposts table using only the attacker-supplied b2sid primary key with...

WordPress plugin Blog2Social: Security vulnerabilities in Social Media Auto Post & Scheduler

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...