CVE-2022-3246

CVE-2022-3246: Blog2Social < 6.9.10 - Subscriber+ SQLi

Vendor Unknown
Product Blog2Social: Social Media Auto Post & Scheduler
Weakness CWE-89 · SQLi
Published October 25, 2022
Last update May 7, 2025

CVSS base score

What the vulnerability does

01Description

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers

Key dates

02Disclosure timeline

October 25, 2022 CVE published
May 7, 2025 Record updated