CVE-2026-56044

8th percentile — higher than 8% of all known CVEs

The vulnerability allows an unauthenticated attacker to perform XSS attacks in Blog2Social version 8.9.2 and earlier. The attack can be carried out without authentication, increasing the risk of exploitation.

An attacker can inject malicious JavaScript code that executes in the browsers of site visitors, leading to session theft, redirects, or data theft.

Immediately update the Blog2Social plugin to a version newer than 8.9.2, which includes a fix for the vulnerability.