Skip to content
PluginCanary

Blog2Social

by Adenion · 40,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released yesterday, tested with WordPress 7.1, no open vulnerabilities.

86/ 100Healthy
Canary Score

Based on 4 of 5 areas

Sub-scores for Blog2Social
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-316 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 30 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is Blog2Social still maintained?
Yes. Last release 3 Nov 2026, 47 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns Blog2Social, and has it changed hands?
No change recorded. Main committer Blog2Social since Nov 2015. 4 Nov 2026 · SVN log
Was Blog2Social removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Blog2Social safe?
30 known vulnerabilities, all fixed (latest in 9.1.5). Not on the exploited list. 14 Oct 2026 · Wordfence Intelligence
Is the latest Blog2Social update safe to install?
No ownership change before 9.1.6. No one-star spike after it. 3 Nov 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
PR-Gateway11 Nov 2014 to 7 May 2025, 423 commits
Blog2Social27 Nov 2015 to 4 Nov 2026, 510 commits

2 committers recorded. No ownership changes recorded since 2014.

Maintenance

Last release
yesterday
Releases, 24 months
47
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Blog2Social
Q1 20243
Q2 20245
Q3 20246
Q4 20244
Q1 20254
Q2 20259
Q3 20253
Q4 20255
Q1 20267
Q2 20266
Q3 20267
Q4 20263

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
100%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

16 vulnerabilities in 24 months (30 on record), all patched (latest fixed in 9.1.5).

Show 30 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
14 Oct 2026Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure4.3<= 9.1.49.1.5Before disclosure
24 Sep 2026Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers4.3<= 9.1.09.1.1Before disclosure
16 Sep 2026Insecure Direct Object Reference4.3<= 9.0.09.1.0Same day
16 Sep 2026Authenticated (Subscriber+) Username Enumeration4.3<= 9.0.09.1.0Same day
16 Sep 2026Missing Authorization4.3<= 9.0.09.1.0Same day
25 Jun 2026Unauthenticated Stored Cross-Site Scripting7.2<= 8.9.28.9.3Before disclosure
12 May 2026Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter5.4<= 8.9.08.9.1Before disclosure
7 Apr 2026Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter4.3<= 8.8.38.8.4Before disclosure
25 Mar 2026Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action4.3<= 8.8.28.8.3Before disclosure
17 Feb 2026Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification6.5<= 8.7.48.7.5Before disclosure
9 Jan 2026Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure4.3<= 8.7.28.7.3Before disclosure
24 Nov 2025Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing5.4<= 8.7.08.7.1Same day
5 Nov 2025Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url4.3<= 8.6.08.6.1Before disclosure
5 Nov 2025Incorrect Authorization to Video File Upload4.3<= 8.6.08.6.1Before disclosure
16 Jun 2025Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter6.5<= 8.4.48.4.5Before disclosure
1 May 2025Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.3.38.4.0Before disclosure
31 Jul 2024Authenticated (Author+) Stored Cross-Site Scripting via File Upload6.4<= 7.5.47.5.5Same day
10 Jun 2024Authenticated (Subscriber+) SQL Injection9.9<= 7.4.17.4.2Before disclosure
25 Apr 2024Information Exposure5.3<= 7.4.27.5.0Before disclosure
26 Jul 2023Reflected Cross-Site Scripting6.1< 7.2.17.2.1Same day
3 Oct 2022Authenticated (Subscriber+) Server-Side Request Forgery6.8<= 6.9.96.9.10Before disclosure
3 Oct 2022Authenticated (Subscriber+) SQL Injection8.8<= 6.9.96.9.10Before disclosure
27 Sep 2022Missing Authorization to Authenticated (Subscriber+) Settings Update4.1<= 6.9.116.9.1213
5 Apr 2022PHP Object Injection8.5<= 6.9.36.9.4Same day
22 Nov 2021Reflected Cross-Site Scripting6.1<= 6.8.66.8.7Before disclosure

Changelog mentions of security fixes: 8.9.3 (security); 9.1.1 (security); 9.1.5 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: 4.9 (11 reviews). Lifetime: 4.5.

Last 90 days vs lifetime average rating for Blog2Social
Last 90 days4.9
Lifetime4.5
Average rating per quarter
Average rating per quarter for Blog2Social
Q1 20264.0
Q2 20265.0
Q3 20264.9
Q4 20265.0

Average rating rose from 4.0 to 5.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star1729
4 star125
3 star41
2 star50
1 star162
Latest low reviews

Momentum

Active installs
40,000+
Downloads, last full week
4,504
Weekly downloads, last 26 complete weeks
Weekly downloads for Blog2Social
4 May 20262,189
11 May 20265,682
18 May 20264,669
25 May 202624,483
1 Jun 202624,876
8 Jun 20264,202
15 Jun 20263,139
22 Jun 202624,236
29 Jun 20265,555
6 Jul 202625,124
13 Jul 20264,079
20 Jul 202624,036
27 Jul 20264,523
3 Aug 20264,360
10 Aug 20262,735
17 Aug 202623,655
24 Aug 20265,159
31 Aug 20263,391
7 Sep 20262,588
14 Sep 202624,149
21 Sep 202627,423
28 Sep 202641,509
5 Oct 202625,210
12 Oct 202624,530
19 Oct 20265,191
26 Oct 20264,504

Weekly downloads over the last 4 weeks are 10% above the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Simple Social IconsScore 95 · 100,000+WPZOOM ConnectScore 95 · 90,000+Ocean Social SharingScore 95 · 60,000+

Facts

Full name
Blog2Social: Social Media Auto Post & Scheduler
Version
9.1.6
Author
Adenion
Added
11 Nov 2014
Last updated
3 Nov 2026
Active installs
40,000+
Requires WordPress
6.2
Tested up to
7.1.4
Requires PHP
7.4
Category
Marketing & Advertising > Email Marketing & Campaigns
Tags
auto post, auto repost, cross posting, social media scheduler, social media automation

Other plugins by this author: PR-Gateway Connect

Questions about Blog2Social

Is Blog2Social still maintained?

Yes. Last release 3 Nov 2026, 47 releases in the last 24 months.

Who owns Blog2Social, and has it changed hands?

No change recorded. Main committer Blog2Social since Nov 2015.

Was Blog2Social removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Blog2Social safe?

30 known vulnerabilities, all fixed (latest in 9.1.5). Not on the exploited list.

Is the latest Blog2Social update safe to install?

No ownership change before 9.1.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue