CVE-2026-108092 | Blog2Social Plugin up to 9.1.4 on WordPress AJAX Handlers b2s_ship_item/b2s_ship_item_reload_url postId resource injection

October 15, 2026 Yanac

A vulnerability was found in Blog2Social Plugin up to 9.1.4 on WordPress and classified as problematic. The affected element is the function b2s_ship_item/b2s_ship_item_reload_url of the component AJAX Handlers. Such manipulation of the argument postId leads to improper control of resource identifiers.

This vulnerability is documented as CVE-2026-108092. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More