CVE-2019-9576

The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.

• CWE-79

• https://lists.openwall.net/full-disclosure/2019/02/05/6Exploit, Mailing List, Third Party Advisory
• https://security-consulting.icu/blog/2019/02/wordpress-blog2social-xss/Exploit, Third Party Advisory
• https://wordpress.org/plugins/blog2social/#developersProduct, Third Party Advisory
• https://lists.openwall.net/full-disclosure/2019/02/05/6Exploit, Mailing List, Third Party Advisory
• https://security-consulting.icu/blog/2019/02/wordpress-blog2social-xss/Exploit, Third Party Advisory
• https://wordpress.org/plugins/blog2social/#developersProduct, Third Party Advisory

Published

Mar 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9569Buffer Overflow in dactetra in Delta Controls enteliBUS Mana…
• CVE-2019-9570An issue was discovered in YzmCMS 5.2.0. It has XSS via the …
• CVE-2019-9572SchoolCMS version 2.3.1 allows file upload via the theme upl…
• CVE-2019-9573The WP Human Resource Management plugin before 2.2.6 for Wor…
• CVE-2019-9574The WP Human Resource Management plugin before 2.2.6 for Wor…
• CVE-2019-9575The Quiz And Survey Master plugin 6.0.4 for WordPress allows…
• CVE-2019-9578In devs.c in Yubico libu2f-host before 1.1.8, the response t…
• CVE-2019-9579An issue was discovered in Illumos in Nexenta NexentaStor 4.…8.1
• CVE-2019-9580In st2web in StackStorm Web UI before 2.9.3 and 2.10.x befor…
• CVE-2019-9581phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file u…8.8
• CVE-2019-9582eQ-3 Homematic CCU2 outdated base software packages allows D…
• CVE-2019-9583eQ-3 Homematic CCU2 and CCU3 obtain session IDs without logi…8.2