https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:10:38.289338+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-29967 cnvd-2025-29967 2026-10-07T19:10:38.331243+00:00 cnvd-2025-29967 https://cve.radiocsirt.org/vuln/euvd-2026-284666 EUVD-2026-284666 2026-10-07T19:10:38.331282+00:00 EUVD-2026-284666 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13558 fkie_cve-2025-13558 2026-10-07T19:10:38.331297+00:00

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'deleteUserCcDraftPost' function in all versions up to, and including, 8.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the status of arbitrary posts to trash.

 https://cve.radiocsirt.org/vuln/ghsa-3f5h-5c3g-c68c GHSA-3f5h-5c3g-c68c 2026-10-07T19:10:38.331330+00:00

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'deleteUserCcDraftPost' function in all versions up to, and including, 8.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the status of arbitrary posts to trash.