CVE-2024-3678

MEDIUM

Blog2Social: Social Media Auto Post & Scheduler - Info Disclosure

Title source: llm
STIX 2.1

Description

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2. This makes it possible for unauthenticated attackers to view limited information from password protected posts.

References (3)

Scores

CVSS v3 5.3
EPSS 0.0044
EPSS Percentile 63.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-862 CWE-922
Status published
Products (2)
adenion/blog2social < 7.5.0
pr-gateway/Blog2Social: Social Media Auto Post & Scheduler < 7.4.2
Published Apr 26, 2024
Tracked Since Feb 18, 2026