WordPress Plugin Blog2Social:Social Media Auto Post Scheduler Multiple Vulnerabilities - CVE-2022-3246 - Vulnerability Database

WordPress Plugin Blog2Social:Social Media Auto Post Scheduler Multiple Vulnerabilities - CVE-2022-3246

High
Reference: CVE-2022-3246
Title: WordPress Plugin Blog2Social:Social Media Auto Post Scheduler Multiple Vulnerabilities
Overview:

WordPress Plugin Blog2Social:Social Media Auto Post Scheduler is prone to multiple vulnerabilities including SQL injection and server-side request forgery vulnerabilities. An attacker may leverage these issues to compromise the application access or modify data or exploit latent vulnerabilities in the underlying database or to make the vulnerable server perform port scanning of hosts in internal or external networks other attacks are also possible. WordPress Plugin Blog2Social:Social Media Auto Post Scheduler version 6.9.9 is vulnerable prior versions may also be affected.